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I, James G. Douvikas, do hereby declare that: 

1. I am an inventor of tiie invention described in U.S. Patent application serial number 
09/507,043. 

2. I actually reduced to practice in the United States at least the invention claimed in 
claims 40, 48, and 56 of the above-identified patent application prior to November 12, 1999. 
Attached Exhibit A is a copy of a text listing of a file containing Java software used in the 
reduction to practice of an embodiment of the claimed invention. 

3. Prior to November 12, 1999, 1 manipulated a computer system to cause the computer 
system to execute at least the Java software of Exhibit A and display screenshots similar to those 
depicted in Exhibits B, C, D, and E. 

3. Attached as Exhibit B is a screenshot of a user web browser of a search capability at an 
electronic business card file Web site of an embodiment of the claimed invention produced by a 
processor executing portions of the Java software of Exhibit A. 
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4. Attached as Exhibit C is a screenshot of a user web browser of fields for entry and 
modification of user information at an electronic business card file Web site of an embodiment 
of the claimed invention produced by a processor executing portions of the Java software of 
Exhibit A. 

5. Attached as Exhibit D is a screenshot of a user web browser of a screen displaying user 
information as in Exhibit C including a hyperlink to a screen as in Exhibit G for entry and 
modification of temporary location information by a user at an electronic business card file Web 
site of an embodiment of the claimed invention produced by a processor executing portions of 
the Java software of Exhibit A. 

6. Attached as Exhibit E is a screenshot of a user web browser of a search results screen 
at an electronic business card file Web site of an embodiment of the claimed invention produced 
by a processor executing portions of the Java software of Exhibit A. 

7. Attached as Exhibit F is a concurrent version system (CVS) output listing check-in 
dates of revisions of Java software including Exhibit A used in an embodiment of the claimed 
invention. As identified in revision entry 1.29 of June 29, 1999, a Whereami capability 
including the ability to allow the user to specify a privacy level for the temporary location 
information of the Whereami capability was added to an embodiment of the claimed invention 
reduced to practice prior to November 12, 1999. The Whereami capability is within the scope of 
the claimed invention of claims 40, 48, and 56. 

8. Attached as Exhibit G is a screenshot of a user web browser of a screen for 
modification of temporary location information and entry of user-specified privacy levels 
corresponding thereto of an embodiment of the claimed invention produced by a processor 
executing portions of the Java software of Exhibit A. 

9. Attached as Exhibit H is a table comparing the elements of claims 40, 48, and 56 with 
the corresponding reduction to practice identified in Exhibits A-G. 

10. As the Java software of Exhibit A and concurrent version system output listing of 
Exhibit F show, the invention actually existed and as the screenshots depict, the invention 
worked for its intended purpose. 
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I , KxWb.ts A-G, which relatcto the aforementioned actual reduction to pracUcc and arc 
Hereby incoiporaled by rdcrence the. entirety herein, correspond to the invention broad^ 
discoid and c..n.cd m ti. above-idcnUfted pat^t application. A^al dates ot the cxlubrt. 
,.ve b.en removed, but are pr.or to November 12. 1999. Further, company propnc^ 
inlbrmalion has been removed from all exhibits. 

12. Further declarant saith not. 

I hereby declare that all statements made herein of my o^ knowledge are true and that 
all statements made on information and belief ..c believed to be true; and further that these 
^temcnt, arc made «.th the knowledge tl.1 willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 100 1 of Title 18 ofthc United States 
Code, and that such willlUl false sUtements may jeopardize the validity of the application or any 
patent issuing thcrcon. 
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1 /** ^ . 1 oQ 5 peter 

2 * $Id: SearchApplicationInterfaceoava,v 1,29 

3 Exp $ r 

4 * 

6 * Sopjright 3 , Hewlett-Packard Company, All rights reserved 

7 */ 
8 

9 package ecardf ile . appl; 
10 

11 import java.io.*; 

12 import java-util.*; 

13 import java.text .SimpleDateFormat; 

14 import java . text . DateFormat ; 
15 

16 import java .math . BigDecimal; 
17 

18 import java . net . URL; 

19 import java . net . URLEncoder; 

20 import java . net . URLConnection; 

21 import java. net. Mai formedURLExcept ion; 

22 

23 import java . rmi . RemoteExcept ion; 

24 import java . rmi . NotBoundExcept ion; 
25 

26 import javax . servlet . * ; 

27 import javax. servlet .http. *; 
28 

29 import multiserv. applservlet . ; 

30 import multiserv . sessionmgr .* ; 

31 import multiserv . dbmgr . *; 

32 import multiserv . util .* ; 
33 

34 import ecardf ile . dbappl . * ; 
35 

Ij ':%,e class implements the application ^ehaviour for ^^^^ SearchServlet . 

38 * Many of the methods are hooks called by RequestHandler 

39 * instances invoked by SearchServlet (i.e. ApplServlet) . 

40 * 

42 * 0see multiserv . applservlet . RequestHandler 

43 * @see SearchServlet 

44 * @see CoromonConfig 

45 * @see multiserv. sessionmgr.Sessionlmpl ^Kr«^^ HMni 
^o Lt>fc:e uiuj-i-j.^ ^ ^ yQTRnNr;>^^rvlet . html and dbmgr. ntmx 

46 * <STRONG>Other Documentation : </STRONb>serviei- . nuu 



Aversion $Id: SearchApplicationXnterf ace . java, v 1.29 



47 
48 

49 peter Exp $ 

5? pilblic class SearchAp^licationlnterface extends Co„«.onApplicationInterf ace 
52 implements CommonConfig { 

54 public static final short PUBLIC__ACCESS = 0; 

55 public static final short PRIVATE_ACCESS = 255; 

57 public SearchApplicationlnterface U 

58 throws RemoteException 

59 { } 
60 
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61 /** 

62 * Used to initialize the application specific class which 

63 * implements this interface. The servlet configuration is 

64 * passed in so that the servlet environment is available to 

65 * the application code. 

66 * 

67 * eparam applServlet The Servlet instance which owns this 

* Applicationlnterface instance. 

69 * Gexception ServletException 

70 */ 

71 public void init (ApplServlet servlet, 

72 String managerName, String rmiHost) 

73 throws ServletException, lOException { 
74 

75 super. init (servlet, managerName, rmiHost); 

76 . . „ 

77 String fnName = "SearchApplicationlnterf ace . init : 

78 

79 trace ( fnName ) ; 

80 

81 int verboseProp = , , ^ i ^^t^\\ 

82 Integer. parseInt(getProperty("ecardfile. applServlet. verbose ) ) 

83 if (verboseProp == 0) 

84 verboseErrors = false; 

85 else 

86 verboseErrors = true; 
87 

88 trace (fnName + "done"); 

89 } 
90 

91 protected void destroy () { 

92 super .destroy () ; 

93 connMgr . release ( ) ; 

94 } 

95 /** 

96 * Receives (asynchronous???) notifications from XXX 

* This overrides the corresponding method in Applicationlnterface 

98 * which in turn implements the method 

99 * 

* eparam nofn An interface to the object carrying notification 
XOl * information. 

102 */ 

103 public void notify (SessionNotificat ion nofn) { 

104 super, notify (nofn) ; 

105 String fnName - "SearchApplicationlnterf ace . notify : 

106 String sessionid = nof n . sessionid () ; 

107 Session session = nof n . sessionOb j ( ) ; 



97 
98 
99 
100 



108 
109 



if (nofn.reasonO != SessionNotif ication . SESSION__EXPIRATION) { // XXX 

110 put entry in error log to get a perspective on any E<MI errors 

111 trace(fnName + "invoked with reason = " + nof n . reason U ) ; 

112 DateFormat fmt = new SimpleDateFormat ( "yyyyMMddHHmmss ); 

113 fmt . setTimeZone (getTimeZone () ) ; 
114 

115 fmt . format (new Date () ) ; 

116 System.err.printin (fmt. format (new DateO) + "'"„'*' 

117 fnName + "invoked with reason = " + 

118 nofn.reasonO + 

lig " sessionId=" + sessionid); 

120 } 
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\l\ if (nofn. reason (.) == SessionNotif ication . SESSION_EXPIRATI0N) 

123 /y 



124 

125 } 

126 

127 /** 
128 
129 
130 
131 
132 
133 
134 



Authenticate the user using a user id and password combination. 

129 * Authentication is done against the database. 

This method can also be used to implement any pre-session creatxon 

131 * functionality. 

132 * 

133 * @param userName The user name string. 

134 * @param password The user's password string. 

135 * Gparam req The original HTTP request data. ^ 

136 * ©return A session object containing any initial session data. 

137 * The returned object must be a sub-class of GenericSession , 

138 * This will be used to initialize the session object in 

139 * the session manager. If the authentication fails, 

140 * null is returned. . 

141 * ©exception RemoteException A problem occured while trying to create 

142 * the session object in the SessionManager 

143 * ©exception DbException A problem occured while trying to authenticate 

144 * the user against the database. 

145 * ©see UserAuth 

146 * ©see Sessionlmpl 

147 * / J 

148 public GenericSession authenticateUser (String userName, String password, 

HttpServletRequest req) 

150 throws RemoteException, SessionAccessException, 

151 NotSerializableException, ServletException, lOException//, DbException 

152 { f? 

153 String fnName = "SearchApplicationlnterf ace . authenticateUser : 

154 Sessionlmpl session = null; 

155 String subop = getServlet Parameter (req, OP_TAG) ; 
156 

157 Date date = new Date ( ) ; 

158 long Idate = date. getTime ( ) /lOOO; 
159 

160 session = Sessionlmpl . getSession ( 

ft ft 

161 

162 null, 

j^-j new BigDecimal (Idate) r 

new BigDecimal ( Idate) , 
req. getRemoteAddr ( ) 

166 ^ ' 
167 

168 return session; 



169 
170 
171 
172 

173 * 
174 

175 */ 

176 public String getCookieTag ( ) { 

177 return COOKIE_TAG; 

178 } 
179 

180 /** 



Return the application specific cookie tag 
©return name of the application specific cookie 
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181 * Post authentication f unctionality - 

182 / If the authentication had failed a screen displaying 

183 * an appropraite message is displayed. 

184 * 

185 * @param session 

186 * Gparam req 

187 * @param resp 

188 * 

189 */ 

190 public void postAuthenticate (String sessionid, 

191 Session session, 

192 HttpServletRequest req, 

193 HttpServletResponse resp) 

194 throws lOException, SessionAccessException 

195 { 

196 String fnName = "SearchApplicationlnterf ace . postAuthenticate : 
197 

198 // Send an HTML document back to the client in response 

199 // to the outcome of the authentication. 

200 if (session == null) { 

201 trace (fnName + "authentication failed"); 
202 

203 // The authentication failed 

204 sendParseDocument (new HashtableO, "BadLogin , html" , resp) ; 

205 } else { 

206 // The authentication succeeded 

207 String userName - (String) session. getObject (SESS_USER_TAG) ; 

208 trace("User is " + userName); 

209 trace ("Session start time is " + 

210 (BigDecimal) session. getObject (SESS_START_TAG) ) ; 

211 log ("LOGIN: "+ "User " + userName + 

212 " : " + req-getRemoteAddr ( ) + 

213 " : " + 

214 req. getHeader ( "User-Agent" ) ) ; 
215 

216 executeOperation (APPL OPERATION, 

217 sessionid, 

218 session, 

219 req, 

220 resp); 

221 } 

222 } 
223 

224 

225 * Called by RequestHandler to execute an application defined 

226 * operation. 

227 * Valid operations are: 

228 * <DL> 

229 * <DT> Arthroscopy 

230 * <DD> Performed on Peter's knee 

231 * </DL> 

232 * ^. -.^ 

233 * Operations can be specification of the OP_TAG as a hidden field 

234 * or as part of a Query String in a GET request. Alternatively, 

235 * certain FORM buttons are defined to execute specific operations. 
236 

237 * @param operation Specifies the operation to perform. This 

238 * should be one of the operation strings returned 

239 * by getOperation. 

240 * Qparam session An interface to the current session object. 
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241 . * eparam req The data from the original HTTP request. 

242 * Oparam rasp Provides methods for responding to the request. 

243 */ * 

244 public void executeOperation (String operation, 

245 String sessionid, 

246 Session session, 

247 HttpServletRequest req, 

248 HttpServletResponse resp) 

249 { 

250 String fnName = "SearchApplicationlnterf ace . executeOperation: "; 
251 

252 trace (fnName + "executeOperation Op=" + operation); 

253 

254 long loginid = 0; 

255 

256 try { 

257 if (operation == APPL_OPERATION) { 

258 String subop = getServlet Parameter (req, OP_TAG) ; 

259 String button = getServlet Parameter (req, BUTTON_TAG) ; 

260 String login = getServletParameter (req, LOGIN_TAG) ; 
261 

262 trace (fnName + "Subop = " + subop); 

263 if (button != null) 

264 trace (fnName + "button = " + button); 
265 

266 if (subop == null) { 

267 Hashtable tokens = new Hashtable () ; 
268 

269 tokens. put (SESSIONID_TOKEN, sessionid) ; 

270 tokens .put (OP_TOKEN, DOSEARCH_TAG) ; 

271 sendSearchScreen (req, resp, tokens); 

272 } 

273 else if (operationRequiresLogin (subop) II login ! null) { 

274 String eCardId = getServletParameter (req, ECARDID_TAG) ; 

275 Hashtable tokens = new Hashtable () ; 
276 

277 trace (fnName + "Operation requires login:" + subop); 

278 if (subop != null) 

279 tokens. put (OP_TOKEN, subop); 
280 

281 if (eCardId != null) 

282 tokens .put (ECARDID_TOKEN, eCardId) ; 
283 

284 tokens. put (SESSIONID_TOKEN, sessionid) ; 

285 

286 if (isLoggedIn (sessionid, session)) { 

287 // Should extract the userld and pass on just the once 

288 // some the the following routines call isLoggedIn again XXX 

289 loginid = 

290 ( (Long) session. getObject (SESS_USER__ID_TAG) ) . longValue {) ; 

291 trace (fnName -»- "User is logged in " + loginid); 

292 if (subop. equals (NEWUSER_TAG) ) { 

293 newUser (sessionid, req, resp); 

294 } 

295 else if ( subop . equals (ADDUSER_TAG) ) { 

296 addUser (sessionid, session, eCardId, req, resp, 

297 tokens) ; 

298 } 

299 else if ( subop . equals ( DELETEUSER_TAG) ) { 

300 sendParseDocument (tokens, "Conf irmDelete , html " , resp) ; 
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else if (subop.equals(DELETEUSERCONFIRM_TAG) ) { 
if (button, equals (OK_TAG) ) { 

if (deleteUser (sessionid, session, req, resp. 



301 } 
302 
303 
304 

305 tokens)) , , 

306 sendSearchScreen(req, resp, tokens); 

307 } 

308 else { 

309 sendSearchScreen{req, resp, tokens}; 

310 } 

311 } 

312 else if ( subop . equals ( DISPLAYLIST_TAG) ) { 

3J3 displayPersonalList (sessionid, session, req, 

3J4 resp, tokens) ; 

315 > , . 

316 else if (subop. equals (ADDLIST_TAG) ) { 

317 addPersonalList (sessionid, session, req> 

resp, tokens) ; 



else if ( subop. equals (CHANGEDETAILS_T AG) ) { 

changeDetailsdoginId, session, req, resp, tokens); 



318 

319 } 
320 
321 

322 } 

323 else if (subop. equals (CHANGEWHEREAMI_TAG) ) { 

324 changeUserInfo(loginId, session, req, 

325 resp, tokens, WHEREAMX) ; 

326 } 

327 else if ( subop . equals ( DOCHANGEDETAILS_TAG) ) { 

328 if (button. equals (OK_TAG) ) { 

329 if (doChangeDetails (sessionid, session, req, 

resp, tokens)) 

331 searchUser (sessionid, loginid, req, resp); 

332 } 

333 else if (button . equals (DELETEUSER__TAG) ) { 

334 sendParseDocument (tokens, "Conf irmDelete . html" , resp); 

335 } 

336 else 

337 displayPersonalList (sessionid, session, req, 

resp, tokens); 

339 } 
340 
341 



else if (subop. equals (DOADDWHERE_T AG) ) { 
if (button. equals (OK_TAG) ) { 

342 if (doAddUserlnfo (loginid, session, req, 

^43 resp, tokens)) 

344 searchUserlnfo (sessionid, loginid, req, resp, 

345 WHEREAMI ) ; 

346 } 

347 else { 

348 searchUser (sessionid, loginid, req, resp;, 

349 } 

35^ ^ else if ( subop. equals ( DOCHANGEWHERE^TAG) ) { 

352 if (button. equals (OK_T AG) ) { 

353 if (doChangeUserlnfo (loginid, session, req, 
^^4 resp, tokens) ) 

355 searchUserlnfo (sessionid, loginid, req, resp, 

356 WHEREAMI ) ; 

357 } 

358 else { 

359 searchUser (sessionid, loginid, req, resp); 

360 } 



Page 6 of 41 



Exhibit A 



36 1 } 

362 , else if (subop . equals { DOS EARCH_TAG) ) { 

353 * • searchUser (sessionid, loginid, req, resp) ; 

355 ^ else if (subop. equals (WHEREAMI^T AG) ) { 

355 searchUserInfo(sessionId, loginid, req, resp, 

367 WHEREAMI) ; 

368 } 

369 else if (subop. equals (ONETIME_TAG) ) { 

370 . oneTiraeWelcomeCsessionld, session, req, resp, toKens) ; 

371 } 

372 else if (subop. equals (DOUPDATEPLIST^TAG) > { 

373 if (but ton. equals (UPDATE_TAG) ) { 

374 if (doUpdatePlist (sessionid, session, req, 

resp, tokens, false) ) 

displayPersonalList (sessionid, session, req, 

resp, tokens) ; 



375 
376 
377 

378 ^ 

379 else if (button. equals (DELETE_TAG) ) { 

3gO // Delete lines 

if (doUpdatePlist (sessionid, session, req, 

resp, tokens, true)) 
displayPersonalList (sessionid, session, req, 

resp, tokens) ; 



381 
382 
383 
384 

385 } 

385 else if (button. equals (DOWNLOAD_TAG) ) { 

387 displayDownloadList (sessionid, session, req, 

388 resp, tokens); 

389 } 

390 else 

391 displayPersonalList (sessionid, session, req, 
^92 resp, tokens); 

394 else if (subop. equals (DODOWNLOADPL I ST_TAG) ) { 

395 if (button. equals (PALMCSV_TAG) ) { 

395 downloadPalmCSVdoginId, req, resp, tokens); 

397 } 

398 else if (button. equals (MSEXCHANGE_T AG) ) { 

399 downloadCEExchangedoginId, req, resp, tokens); 

400 

401 } 

402 else { 
403 
404 

405 } 

406 } 

407 else { 

408 

409 } 

410 } 

4\\ ^ ^trace(fnName + "User is NOT logged in") 



! j-se 1 

displayPersonalList (sessionid, session, req, 

resp, tokens) ; 



sendSearchScreen(req, resp, tokens) ; 



4j4 // Have to put all possible arguments to operations here 

4fc // so the chaining will work. 

4;5 String cardid = getServlet Parameter (req, CARDID_TAG) ; 

417 String firstName = getServlet Parameter ( req, 

418 FIRSTNAME TAG); _ ^ t nQTM^MF TAG) - 

419 - String lastName = getServletParameter (req, LASTNAME^TAG) , 
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420 String companyName = getServletParameter (req, 

421 COMPANYNAME_TAG) ; 
422 

423 if (cardld null) 

424 tokens. put {CARDID_TOKEN, cardld) ; 

425 if (firstName != null) 

426 tokens. put (FIRSTNAME_TOKEN, firstName) ; 

427 if (lastName != null) 

428 tokens.put (LASTNAME_TOKEN, lastName) ; 

429 if (companyName != null) 

430 tokens .put {COMPANYNAME^TOKEN, companyName) ; 
431 

432 sendLoginScreen(req, resp, tokens); 

433 } 

434 } 

435 else { // Login not required for these operations 
436 

437 if (isLoggedIn(sessionId, session)) { 

438 // Should extract the userld and pass on just the once 

439 // some the the following routines call isLoggedIn again XXX 

440 loginid = 

441 { (Long) session. getObject{SESS_USER_ID_TAG) ) .longValueO ; 

442 trace (fnName + "User is logged in " + loginid); 

443 } 

444 Hashtable tokens = new Hashtable ( ) ; 

445 String eCardId = getServletParameter ( req, ECARDID_TAG) ; 
446 

447 tokens. put (SESSIONID_TOKEN, sessionid) ; 
448 

449 if (eCardId null) 

450 tokens. put (ECARDID_TOKEN, eCardId) ; 
451 

452 i f ( subop , equals ( DOSEARCH_TAG ) ) { 

453 searchUser (sessionid, loginid, req, resp) ; 

454 } 

455 else if ( subop . equals (WHEREAMI_TAG) ) { 

456 searchUserlnfo (sessionid, loginid, req, resp, WHEREAMI ) ; 

457 } 

458 else if (subop . equals (SEARCH_T AG) ) { 

459 tokens .put (OP_TOKEN, DOSEARCH_TAG) ; 

460 sendSearchScreen (req, resp, tokens); 

461 } 

462 else if ( subop . equals (NEWUSER__TAG) ) { 

463 newUser (sessionid, req, resp); 

464 } 

465 else if ( subop . equals (ADDUSER_TAG) ) { 

466 if (button, equals (OK_TAG) ) { 

467 addUser (sessionid, session, eCardId, req, resp, 

468 tokens ) ; 

469 } 

470 else { 

471 sendSearchScreen (req, resp, tokens); 

472 } 

473 } 

474 else if (subop . equals (CONFIRM_TAG) ) { 

475 confirmUser (sessionid, session, eCardId, req, resp, 

476 tokens) ; 

477 } 

478 else if ( subop. equals ( DISPLAY__ PAG E_T AG) ) { 

479 String htmlPage = getServlet Parameter ( req, PAGE_TAG) ; 
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480 

481 sendParseDocument (tokens, htmlPage, resp) ; 

482 ' } 

483 else if (subop . equals ( DOWN LOADS I NGLE_T AG) ) { 

484 displayOownloadList (sessionid, session, req, 

485 respr tokens); 

486 } 

487 else if (subop . equals ( DO DOWNLOADSINGLE_T AG) ) { 

488 if (button. equals {PALMCSV_TAG) ) { 

489 downloadPalmCSVdoginId, req, resp, tokens); 

490 } 

491 else if (button . equals (MSEXCHANGE_T AG) ) { 

492 downloadCEExchangedoginId, req, resp, tokens); 

493 } 

494 else { 

495 tokens , put (OP_TOKEN, DOSEARCH_TAG) ; 

496 sendSearchScreen(req, resp, tokens); 

497 } 

498 > 

499 else { 

500 tokens. put (OP_TOKEN, DOSEARCH_TAG) ; 

501 sendSearchScreen(req, resp, tokens); 

502 } 

503 } 

504 } 

505 } 

506 catch (lOException e) { 

507 io_error (resp) ; 

508 } 

509 catch (SessionAccessException e) { 

510 trace (fnName + "executeOperation sae=" + e . getMessage () ) ; 

511 saeerror ( resp ) ; 

512 } 

513 catch (ServletException e) { 

514 trace (fnName + "executeOperation se=" + e . getMessage { ) ) ; 

515 sendError("A servlet exception occured", e . getMessage () , 

516 resp) ; 

517 } 

518 } 
519 

520 /** 

521 * Called when a received request does not contain a valid 

522 * session id. The application should return an error /warning 

523 * document to the user. 
524 

525 * If the error occured during a normal operation (i.e. other than 

526 * Logging in or Logging out) it was more than likely due to the sessi 

527 * having expired. In this case just bring up the login screen. 

528 * 

529 * @param operation The operation which was being attempted. 

530 * @param req The original HTTP request • 

531 * @param resp The HTTP response 

532 */ 

533 public void accessDenied (String operation, 

534 HttpServletRequest req, 

535 HttpServletResponse resp) 

536 { 

537 String fnName = "SearchApplicationlnter face . accessDenied : 
538 

539 try { 
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540 




if (operation. equals (APPL_OPERATION) ) { 


541 


* 


String op = getServlet Parameter (req, OP_TAG) ; 


542 




string eCardId = getServlet Parameter (req, ECAKUID_lAO; / 


543 




Hashtable tokens = new Hashtable ( ) ; 


544 






545 




if (op != null) 


546 




tokens. put (OP_TOKEN, op) ; 


547 






548 




if (eCardId != null) 


549 




tokens, put (ECARDID_TOKEN, eCardId) ; 


550 






551 




if ( ! checkAccess (req) ) { // IP Blocked etc 


552 




sendError (tokens. Your IP Address nas Deen DiocKeo. , 


553 




"Please contact " + 


554 




get Property ( "ecardf ile . sessionmgr . sm_web_email " ) , 


555 




resp) ; 


556 




) 


557 




else 


558 




{ 


559 




sendLoginScreen (req, resp, tokens); 


560 




} 


561 




} 


562 




else { 


563 




sendParseDocuitient ( new nasntaDie t ; , Access r orDiuutiii . iiumx 


564 


resp) 




c a C 

565 




} 


566 




} 


567 




catch (lOException ignore) { 


568 




trace (fnName + ": Ignoring lOException" 


569 




+ ignore , getMessage ()) ; 


570 




} 


571 




catch (ServletException ignore) { 


572 




trace (fnName + ": Ignoring ServletException" 


573 




+ ignore . getMessage ( ) ) ; 


574 




} 


575 


} 




576 






577 


/ ★ ★ 


578 




Called by RequestHandler prior to the destruction of the 


579 


* 


session object. 


580 


★ 




581 


* 


Gparam session An interface to the associated session object. 


582 


* 


@param req The data from the original HTTP request. 


583 




@param resp Provides methods for responding to the request. 


584 




/ 


585 


public void preDestroy ( String sessionld. 


586 




Session session. 


587 




HttpServlet Request req. 


588 




HttpServletResponse resp) { 


589 




String fnName - "SearchApplicationlnter face . preDestroy : "; 


590 




trace (fnName) ; 


591 


} 




592 






593 




594 


* 


Called by the RequestHandler immediately after the destruction 


595 


* 


of the session object. 


596 


■A- 


The session is finished. Display the Login screen. 


597 






598 


* 


@param req The data from the original HTTP request. 


599 


★ 


@param resp Provides methods for responding to the request. 
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600 */ 

601 ppblic void postDestroy (HttpServletRequest req, 

602 ' HttpServletResponse resp) 

603 { 

604 String fnName = "SearchApplicationlnterf ace . postDestroy : 

605 trace ( fnName) ; 

606 sendSearchScreen (req, resp) ; 

607 } 
608 

609 public void searchUser (String sessionid, long loginid, 

610 HttpServletRequest req, HttpServletResponse resp) 

611 throws ServletException, lOException 

612 { 

613 resp. setContentType( "text/html") ; 

614 Hashtable tokens = new Hashtable ( ) ; 
615 

616 String eCardId=getServletParameter ( req, ECARDID_TAG) ; 

617 String firstName = getServlet Parameter ( req, FIRSTNAME_TAG) ; 

618 String lastName = getServlet Parameter ( req, LASTNAME_TAG) ; 
619 

620 tokens. put {SESSIONID_TOKEN, sessionid) ; 

621 

622 if ((eCardId == null II eCardld. equals ("") ) && 

623 (firstName == null II f irstName . equals ("") ) && 

624 (lastName == null II lastName • equals ("")) ) { 
625 

626 String msgl="<B>Validat ion Error</B>"; 

627 String msg2="You must enter a search string"; 

628 sendError (tokens, msgl, msg2, resp); 
629 

630 return; 

631 } 
632 

633 if (eCardId !- null && ! eCardld. equals ("") ) { 

634 tokens .put (ECARDID_TOKEN, eCardld) ; 
635 

636 trace ( "Searching by eCardld = " + eCardld); 

637 

638 displayCarddoginId, eCardld, tokens, false, "CardDetails.html", 

639 resp) ; 

640 } 

641 else { 

642 if (firstName == null) 

643 firstName = ""; 

644 if (lastName == null) 

645 lastName = ""; 
646 

647 trace { "Searching by firstName = " + firstName +" 

648 lastName="+lastName) ; 

649 displayCardListFirstLastName (loginid, firstName, lastName, tokens, 

650 resp) ; 

651 } 

652 } 
653 

654 public void searchUser Info ( String sessionid, long loginid, 

655 HttpServletRequest req, HttpServletResponse resp, 

656 short user Inf oCa tegory ) 

657 throws ServletExcept ion, lOException 

658 { 

659 resp. setContentType ( "text /html") ; 
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660 Hashtable tokens = new HashtableO; 

661 String strCardId = getServletParameter { req, CARDID_TAG) ; 

662 Stri'ng 'firstName = getServlet Parameter ( req, FIRSTNAME_TAG) ; 

663 String lastName = getServletParameter ( req, LASTNAME_TAG) ; 

664 String companyName = getServletParameter ( req, COMPANyNAME_TAG) ; 
665 

666 trace ("Search User info for " + strCardId + + firstName + ":" + 

667 lastName) ; 
668 

669 tokens. put (SESSIONID_TOKEN, sessionid) ; 
670 

671 if (StrCardId != null && ! strCardId. equals ("") ) { 
672 

673 tokens .put (CARDID_TOKEN, StrCardId) ; 

674 long cardid = (new Long (strCardId) ). longValue () ; 
675 

676 if (firstName != null) 

677 tokens.put (FIRSTNAME_TOKEN, firstName) ; 

678 if (lastName != null) 

679 tokens. put (LASTNAME_TOKEN, lastName) ; 

680 if (companyName != null) 

681 tokens . put (COMPANYNAME_TOKEN^ companyName) ; 
682 

683 displayUserInfo(loginId, cardid, tokens, userinf oCategory, 

684 DISPLAY, resp) ; 

685 } 

686 } 
687 

688 void cardDownloadUrl (Hashtable tokens) { 

689 String firstName = ( String) tokens . get ( FIRSTNAME_TOKEN) ; 

690 String lastName = (String) tokens . get (LAS TNAME_TOKEN) ; 

691 String companyName = (String) tokens . get (COMPANYNAME_TOKEN) ; 
692 

693 if (firstName != null) 

694 tokens. put ( FIRSTNAME_ENC_TOKEN, 

695 URLEncoder . encode (firstName . toString () ) ) ; 

696 if (lastName != null) 

697 tokens . put (LASTNAME_ENC_TOKEN, 

698 URLEncoder .encode (lastName . toString ( ) ) ) ; 

699 if (companyName != null) 

700 tokens . put (COMPANYNAME_ENC_TOKEN, 

701 URLEncoder. encode (companyName . toString ( ) ) ) ; 
702 

703 } 
704 

705 public void newUser (St ring sessionid, 

706 HttpServletRequest req, Ht tpServletResponse resp) 

707 throws ServletException, lOException 

708 { 

709 Hashtable tokens = new HashtableO; 

710 tokens. put (OP_TOKEN, ADDUSER_TAG) ; 

711 tokens. put {SESSIONID_TOKEN, sessionid); 

712 DateFormat fmt = new SimpleDateFormat ( "yyyy-MM-dd" ) ; 

713 fmt . setTimeZone (getTimeZone ( ) ) ; 
714 

715 tokens. put (DATEOFENTRY^TOKEN, fmt . format { new Date ( ) ) ) ; 
716 

717 String cardid = getServlet Parameter ( req, CARDID_TAG) ; 

718 if (cardid != null) 

719 tokens. put (CARDID_TOKEN, cardid) ; 
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721 Hashtable lookupTokens = new Hashtable { ) ; 

722 lookupCache.addLookupTokens (LookupCache . ADDRESS, lookupTokens) ; 

723 lookupCache.addLookupTokens (LookupCache . PHONE, lookupTokens) ; 

724 lookupCache.addLookupTokens (LookupCache . EMAIL, lookupTokens) ; 

725 HTMLDocument .buildTokens (lookupTokens, tokens, false) ; 
726 

727 sendParseDocument (tokens, "NewUser.html", resp) ; 

728 } 
729 

730 boolean validateUserForm (String sessionid. Session session, 

731 String eCardId, HttpServletRequest req, 

732 HttpServletResponse resp, Hashtable tokens) 

733 throws ServletException, SessionAccessException, lOException { 

734 String insgl=null; 

735 StringBuffer msg2=new StringBuf f er ( "<UL>\n" ) ; 

736 String passwordl=getServlet Parameter (req, EPASSWORD_TAG) ; 

737 String password2=getServletParameter (req, EPASSWORDCONF_TAG) ; 

738 String einailAuth=getServletParameter (req, EMAILAUTH_TAG) ; 
739 

740 trace ("Validating " + eCardId) ; 
741 

742 if (eCardId == null II eCardld. equals {"") ) { 

743 msgl = "<B>Validation Error</B>"; 

744 msg2. append ("<LI><I>ECardFile ID</I> has not been entered. \n" ) ; 

745 } 

746 if (passwordl null M passwordl . equals {"") ) { 

747 msgl = "<B>Validat ion Error</B>"; 

748 msg2. append ("<LI><I>Password</I> has not been entered. \n" ) ; 

749 } 

750 if (password2 == null II password2 . equals ("") ) { 

751 msgl = "<B>Validation Error</B>"; 

752 msg2. append ("<LI><I>Retype Pass:</I> has not been entered. \n" ) ; 

753 } 

754 else { 

755 if (passwordl != null && ! passwordl , equals ("" ) && 

756 ! passwordl . equals (password2 ) ) { 

757 msgl = "<B>Validation Error</B>"; 

758 msg2. append ("<LI><I>Retype Pass:</I> does not match 

759 <I>Password</I>. \n") ; 

760 } 

761 } 
762 

763 if (emailAuth == null 11 emailAuth . equals ("") ) { 

764 msgl = "<B>Validat ion Error</B>"; 

765 msg2 . append ( "<LI><I>Email Auth:</I> is required for user 

766 validation . \n" ) ; 

767 } 

768 else { 

769 if (emailAuth. indexOf("@")<=0 II emailAuth . indexOf (".") <-0) ( 

770 msgl = "<B>Validat ion Error</B>"; 

771 msg2. append ("<LI><I>Email Auth:</I> is invalid . \n" ) ; 

772 } 

773 } 
774 

775 // Only check eCardId if everything is hunky dory. Don't want 1 

776 // go to session manager or DB unnecessarily. Only minor aggro 

777 // for the user if they've gone this far 

778 if (msgl null) { 

779 boolean checkECardId=true ; 
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781 // Existing users {i,e. those currently doing change user details 

782 // will be logged in. We check if they have changed their eCardld. 

783 // If they have we will need to check it against the- DB. 

784 if {isLoggedIn (sessionid, session)) { 

785 String oldECardId = (String) session . getObject (SESS_USER_TAG) ; 
786 

787 if (oldECardId!=null && oldECardId . equals (eCardId) } { 

788 trace ( "VALIDATE: No change in eCardId"); 

789 checkECardId = false; // Haven't changed it 

790 } 

791 else { 

792 trace ("VALIDATE: CHANGE in eCardId"); 

793 } 
794 

795 } 
796 

797 if (CheckECardId) { 

798 Hashtable userRow = null; 

799 DatabaseConnection jdbc=null; 
800 

801 try { 

802 jdbc = connMgr.getConnectionO ; 

803 if (jdbc null) { 

804 log ("Unable to. get JDBC connection"); 

805 sendError (tokens , 

806 "A occurred while validating details for "+eCardId, 

807 "Unable to get JDBC connection", resp) ; 

808 return false; 

809 } 

810 userRow = jdbc . User (). Get (eCardId) ; 

811 } 

812 catch ( JdbcException je) { 

813 trace ("Unable to validate user details! for " + eCardId + ":" 

814 + 

815 je . getMessage () ) ; 

816 log ("JdbcException: " + j e . getMessage ()) ; 

817 je.printStackTrace (System. err) ; // XXX 
818 

819 if (jdbc != null) 

820 connMgr . f reeConnection (jdbc) ; 
821 

822 sendError (tokens, 

823 "An occurred while validating card details for "+ 

824 eCardId, 

825 je . getMessage () , resp) ; 
826 

827 return false; 

828 } 
829 

830 if (userRow != null) { 

831 msgl = "<B>Validat ion Error</B>"; 

832 msg2. append ("<LI><I>ECardFile ID:</I> <B>"+eCardId+ "</B> has 

833 already been used.\n"); 

834 } 

835 connMgr . f reeConnection (jdbc) ; 

836 } 

837 } 
838 

839 if (msgl != null) { 
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840 msg2. append ("</UL>\n") ; 

841 • sendError (tokens, msgl, msg2 . toString ( ) , resp) ; 

842 ret'urn false; 

843 } 

844 else 

845 return true; 

846 } 
847 

848 public void addUser (String sessionid, 

849 Session session, 

850 String eCardId, 

851 HttpServletRequest req, HttpServletResponse resp, 

852 Hashtable tokens) 

853 throws ServletException, SessionAccessExcept ion, lOException 

854 { 

855 String msg=""; 

856 DatabaseConnection jdbc=null; 

857 String cardid = getServletParameter (req, CARDID_TAG) ; 
858 

859 if ( !validateUserForin( sessionid, session, eCardId, req, resp, 

860 tokens) ) 

861 return; 
862 

863 try { 

864 jdbc = connMgr.getConnectionO ; 

865 if (jdbc == null) { 

866 throw new JdbcException ( "Unable to get JDBC connection"); 

867 } 

868 inactiveDatabaseConnection conn = 

869 new InactiveDatabaseConnection (jdbc . getConnection ( ) ); 
870 

871 String[] columnNames = conn . Inact i veUser () . getColumnNames ( ) ; 

872 String[] row = new String [columnNames . length] ; 
873 

874 for (int i = 0; i < columnNames . length; i++) { 

875 // row[i] = req. getParameterValues (columnNames [i] ) [0] ; 

876 row[i] = req. get Parameter (columnNames [ i ]) ; 

877 } ♦ 

878 // get addresses, emails, phones 

879 Vector addresses = getMultiRowValuesFromForm ( req, 

880 jdbc. Address ( ) . getColumnNames ( ) ) ; 

881 Vector emails = getMult iRowValuesFromForm { req, 

882 jdbc. Email 0 . getColumnNames ()) ; 

883 Vector phones = getMultiRowValuesFromForm { req, 

884 jdbc. Phone 0 . getColumnNames ()) ; 

885 long iRow = conn . InactiveUser (). Insert (conn, row, addresses, 

886 phones, emails) ; 

887 StringBuffer url = new StringBuf f er { ) ; 

888 Hashtable mailTokens = new Hashtable () ; 
889 

890 url. append (get Property("ecardfile.http. url") ) ; 

891 url . append (get Property ( "ecardf ile . html . servletalias" ) ) ; 

892 url. append ("/SearchServlet?") ; 

893 url.append(OP_TAG) ; url . append ("=") ; url . append (CONFIRM_TAG) ; 

894 url . append ("&"); 

895 url. append (ECARDID_TAG) ; url . append ("=" ) ; url . append (eCardId) ; 

896 url. append ("&") ; 

897 ur 1. append (CREATE I D_TAG) ; ur 1 . append ("=" ) ; url . append ( sessxonid) ; 
898 

899 if (cardid != null) { 
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900 url. append ("&") ; , ^, ^T^^ • 

901 url. append (CARDID_TAG); url . append ("=") ; url . append (cardid) , 

902 }' 

903 mailTokens. put (URL_TOKEN, url . toString ( ) ) ; 
904 

905 try { 

906 // Really don't want a proper from address because it can op 

907 the 

908 // floodguards for wrong procedures by new users 

909 HTMLDocument mailMsg - new HTMLDocument ( "EmailMsg . txt" , 

910 mailTokens) ; 
911 

912 SendMail mail = new SendMail ( 

913 

914 getProperty ( "ecardf ile . sessionmgr . sm_web_email" ) , 
915 

916 req,getParameterValues(EMAILAUTH_TAG) [0], 

917 null, 

918 null, 

"Boomerang New User", 

920 mailMsg . toString ( ) 

921 ^ ' 

922 } 

923 catch (lOException ie) { 

924 ie.printStackTrace (System. err) ; 

925 } 

926 sendParseDocument (tokens, "AddUser.html", resp) ; 
927 

928 connMgr . freeConnection ( jdbc) ; 

929 

930 return; 

931 } 

932 catch ( JdbcException je) { 

933 trace ("Error adding user " + je . getMessage ( ) ) ; 

934 msg - j e . getMessage () ; 

935 if (jdbc != null) 

936 connMgr . freeConnection (jdbc) ; 

937 } 

938 sendError (tokens, "A occurred while adding the user", msg, resp) ; 

939 } 

940 , . 

941 public boolean displayCardListFirstLastName (long logmld, 

942 String firstName, 

943 String lastName, 

944 Hashtable tokens, 

945 HttpServletResponse resp) 

946 { 

947 boolean ret=false; 
948 

949 Hashtable userRow = null; 

950 DatabaseConnection jdbc=null; 

951 Vector searchListRows = null; 
952 

953 try { 

954 jdbc = connMgr .getConnect ion 0 ; 

955 if (jdbc == null) { 

956 log("Unable to get JDBC connection"); 

957 sendError (tokens, "A occurred while searching for first/lastn; 
958 

959 "Unable to get JDBC connection", resp); 
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960 return ret; 

961 • } 

962 

963 // This query returns all columns in the row, this inefficxent for 

964 // large queries (optimise to only return rows required, should 

965 also 

966 // only return 100 rows anyway XXX) 

967 searchListRows = jdbc , User ( ) .QueryByFirstLastName ( f irstName, 
9gg lastName) ; 

969 // iterate through Vector, remove values from each row that 

970 shouldn't 

971 // be displayed. Need to check that buildListTokens will not 

972 display 

973 // totally blank row. 

974 for (int idx = searchListRows . size () -1 ; idx >= 0; idx — ) { 

975 Hashtable cardRow = ( Hashtable) searchListRows , elementAt ( idx) ; 

976 long cardid = (( Integer ) cardRow. get (USERSID_COL) ). longValue () ; 

977 short privacy = checkPrivacyAccess ( jdbc, loginid, cardid, 

978 cardRow) ; 

979 if (cardRow. get (FIRSTNAME_COL) == null && 

980 cardRow. get (LASTNAME_COL) == null) { 

981 // This card effectively marked private, don't display 

982 searchListRows . removeElementAt (idx) ; 

983 } 

984 } 
985 

986 trace ( "SearchRows + searchListRows . si ze ()) ; 

987 HTMLDocument .buildListTokens (SEARCHLISTITEMS_TOKEN, 

988 "SearchListltem. html", 

989 searchListRows, tokens, false); 

990 ret = true; 

991 } 

992 catch ( JdbcException je) { 

993 trace ("Unable to get user details! for " + firstName + " " + 

994 lastName + ":" + j e . getMessage ( ) ) ; 

995 log ("JdbcException: " + j e . getMessage ()) ; 
996 

997 if (jdbc != null) 

998 connMgr . freeConnection ( jdbc) ; 
999 

1000 sendError (tokens, 

1001 "An occurred while trying to obtain card details for " + 

1002 firstName + " " + lastName, 

1003 je. getMessage () , resp) ; 

1004 return ret; 

1005 } 

1006 catch (lOException io) { 

1007 trace ("lOException getting user details! for " + firstName + " " + 

1008 lastName + ":" + io . getMessage ()) ; 

1009 } 
1010 

1011 if (jdbc !- null) 

1012 connMgr. freeConnection (jdbc) ; 
1013 

1014 if (ret) 

1015 sendParseDocument (tokens, "SearchList.html", resp) ; 

1016 else 

1017 sendParseDocument (tokens, "NoCardFound.html", resp) ; 
1018 

1019 return ret; 
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1020 } 
1021 

1022 



1023 public boolean displayCard (long loginld, 

1024 String eCardId, Hashtable tokens, 

1025 boolean checkedNameVal, 

1026 String htmlFile, HttpServletResponse resp) 

1027 { 

1028 boolean ret=false; 
1029 

1030 Hashtable userRow = null; 

1031 DatabaseConnection jdbc=null; 
1032 

1033 try { 

1034 jdbc = connMgr , getConnection ( ) ; 

1035 if (jdbc === null) { 

1036 log ("Unable to get JDBC connection"); 

1037 sendError (tokens, 

1038 "A occurred while trying to obtain card details for "+ 

1039 eCardId, 

1040 "Unable to get JDBC connection", resp) ; 

1041 return ret; 

1042 } 

1043 userRow = jdbc, User () .Get (eCardId) ; 

1044 } 

1045 catch ( JdbcExcept ion je) { 

1046 trace ("Unable to get user details! for " + eCardId + ":" + 

1047 j e . getMessage { ) ) ; 

1048 log ("JdbcExcept ion: " + je . getMessage ()) ; 

1049 je.printStackTrace (System. err) ; // XXX 
1050 

1051 if (jdbc null) 

1052 connMgr . freeConnect ion (jdbc) ; 
1053 

1054 sendError ( tokens , 

1055 "An occurred while trying to obtain card details for "+ 

1056 eCardId, 

1057 j e. getMessage () , resp); 
1058 

1059 return ret; 

1060 } 
1061 

1062 if (userRow !- null) { 

1063 Vector addressRows = null; 

1064 Vector phoneRows = null; 

1065 Vector emailRows = null; 

1066 long userld = 0; 

1067 try { 

1068 // Investigate further to find our why usersid is not a long XXX 

1069 userld = ( (Integer ) userRow. get (USERSID_COL) ). longValue () ; 

1070 addressRows = j dbc . Address (). QueryByUserld (userld) ; 

1071 phoneRows = j dbc. Phone (). QueryByUserld ( userld) ; 

1072 emailRows - j dbc. Emai 1 (). QueryByUserld ( user Id) ; 
1073 

1074 addMultiRowTokens ( "address", 

1075 new 

1076 Short (get Property ( "ecardf lie , applservlet . maxAddress" ) ) .shortValue ( ) , 

1077 addressRows, userRow, checkedNameVal ) ; 

1078 addMultiRowTokens ( "phone" , 



Page 18 of 41 



Exhibit A 



1079 new 

1080 Shor,t (getProperty("ecardfile.applservlet.maxPhone") ) . shortValue ( ) , 

1081 phbneRows/* userRow, checkedNameVal ) ; 

1082 addMultiRowTokens ("email", 

1083 new 

1084 Short (getPropertyC'ecardfile.applservlet.maxEmail") ) . shortValue ( ) , 

1085 emailRows, userRow, checkedNameVal); 

1086 } 

1087 catch ( JdbcException je) { 

1088 trace ("Unable to get address details! for " + eCardId + : + 

1089 je. getMessage () ) ; 

1090 } u ^ 

1091 short privacy = checkPrivacyAccess ( jdbc, loginid, userld, userKow; ; 

1092 HTMLDocument .buildTokens (userRow, tokens, checkedNameVal) ; 

1093 cardDownloadUrl (tokens) ; 
1094 

1095 ret = true; 

1096 } 

1097 connMgr. f reeConnection { jdbc) ; 
1098 

1099 if (ret) { 

1100 sendParseDocument (tokens, htmlFile, resp) ; 

1101 } 

1102 else 

1103 sendParseDocument (tokens, "NoCardFound.html", resp) ; 
1104 

1105 return ret; 

1106 } 
1107 

1108 public boolean displayUserInf o (long loginid, 

1109 long cardid, Hashtable tokens, 

1110 short userlnf oCategory, 

1111 short userlnf oAction, 

1112 HttpServletResponse resp) 

1113 { 

1114 boolean ret=false; 

1115 short maxRows = 0; 

1116 String htmlFile = ""; 

1117 boolean checkedNameVal = false; 

1118 , . 

1119 trace ("Display User info for " + cardid + " user=" + loginid) ; 

1120 

1121 Hashtable userlnf o = new Hashtable () ; 

1122 Vector userlnfoRows = null; 

1123 DatabaseConnection jdbc=null; 
1124 

1125 try { 

1126 jdbc = connMgr.getConnectionO ; 

1127 if (jdbc null) { 

1128 log("Unable to get JDBC connection"); 

1129 sendError (tokens, 

1130 "An error occurred while trying to obtain user information 

1131 details", 

1132 "Unable to get JDBC connection", resp) ; 

1133 return ret; 

1134 > 
1135 

1136 trace ( "Looking for user info of category " + userlnfoCategory) ; 

1137 

1138 tokens. put (CATEGORY_TOKEN, " "+userlnf oCategory ) ; 
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1140 . userlnfoRows = jdbc . Userinf o ( ) . QueryByCategory (cardid, 

jj^j >. userlnfoCategory) ; 

1142 

1143 if (userlnfoCategory == WHEREAMI) { 

1 144 maxRows = new Short ( 

1145 ^ 

1146 getProperty ("ecardfile.applservlet .maxWhereAmI") ) . shortValue ( ) ; 

1147 if (userlnfoAction == CHANGE) { 

1148 if (userlnfoRows. isEmptyO ) { 

1149 htmlFile = "WhereAniINew.html"; 

1150 checkedNameVal = false; 

1151 } 

1152 else { 

1153 htmlFile = "WhereAmlChange - html" ; 

1154 CheckedNameVal = true; 

1155 } 

1156 } 

1157 else 

1158 htmlFile = "WhereAmI.html"; 

1159 } 

1160 else { 

1161 sendError (tokens, 

1162 "An error has occurred, please contact ECardFile , com , 
1153 "This category of User Information, " + 

1164 userlnfoCategory + is not supported", resp) ; 

1165 return ret; 

1166 } 

1167 _ ^ 

1168 addMultiRowTokens ("userinfo", maxRows, userlnfoRows, userlnto, 

1169 CheckedNameVal); 

1171 short privacy = checkPrivacyAccess ( jdbc, loginid, cardid, userinfo] 

1172 lookupCache.addLookupTokens(LookupCache. USERINFO, userinfo) ; 

1173 HTMLDocument.buildTokens (userinfo, tokens, checkedNameVal) ; 

1174 trace ("user info = " + tokens); 

1175 ret = true; 

1176 } 

1177 catch ( JdbcException je) { 

1178 trace ("Unable to get userinfo details: " + je , getMessage ( ) ) ; 

1179 log { "JdbcException: " + j e . getMessage ( ) ) ; 

1180 je.printStackTrace (System. err) ; // XXX 
1181 

1182 if (jdbc != null) 

1183 connMgr . f reeConnection ( jdbc) ; 
1184 

1185 sendError (tokens, . 

1186 "An error occurred while trying to obtain user information 

1187 details", 

1188 je.getMessageO , resp) ; 
1189 

1190 return ret; 

1191 } 

1192 connMgr . f reeConnection (jdbc) ; 
1193 

1194 if (ret) { 

1195 sendParseDocument (tokens, htmlFile, resp); 

1196 } 

1197 else 

1198 sendParseDocument (tokens, "NoUserInfoFound.html", resp) ; 
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1199 

1200 ti return ret; 

1201 } 
1202 

1203 ^ 

1204 * Keep this separated from displayCard because I suspect we 11 be 

1205 getting 

1206 * the cards from the DB in one gulp later. 

1207 * Also we don't want to display HTML etc. 

1208 */ 

1209 public Vector getCards ( long loginid. String [] ids) 

1210 { 

1211 Vector cards = new Vector () ; 

1212 Hashtable userRow = null; 

1213 DatabaseConnection jdbc=null; 

1214 long nextld=-l; 
1215 

1216 try { 

1217 jdbc = connMgr . getConnection ( ) ; 
1218 

1219 if (jdbc == null) { 

1220 log ("Unable to get JDBC connection"); 

1221 return null; 

1222 } 
1223 

1224 for (int i=0; i<ids . length; i++) { 

1225 nextid = (new Long (ids [ i] )). longValue () ; 
1226 

1227 userRow = jdbc . User (). Get (nextid) ; 

1228 

1229 if (userRow != null) { 

1230 Vector addressRows = null; 

1231 Vector phoneRows = null; 

1232 Vector emailRows = null; 

1233 long user Id =0; 
1234 

1235 // Investigate further to find our why usersid xs not a long 

1236 XXX 

1237 addressRows - jdbc . Address (). QueryByUserld (nextid) ; 

1238 phoneRows = jdbc. Phone () .QueryByUserld (next Id) ; 

1239 emailRows = jdbc . Email (). QueryByUserld (nextid) ; 
1240 

1241 addMultiRowTokens ("address", 

1242 new 

1243 Short (get Property ( "ecardfile . applservlet .maxAddress" ) ) .shortValue () , 

1244 addressRows, userRow, false) ; 

1245 addMultiRowTokens ("phone", 

1246 new 

1247 Short (getProperty ( "ecardfile . applservlet .maxPhone" ) ) . shortValue ( ) , 

1248 phoneRows, userRow, false); 

1249 addMultiRowTokens ("email", 

1250 new 

1251 Short (getProperty ( "ecardfile . applservlet .maxEmail" ) ) . shortValue ( ) , 

1252 emailRows, userRow, false); 

1253 _ . 

1254 short privacy = checkPrivacyAccess ( j dbc , loginid, nextid, 

1255 userRow) ; 

1256 cards . addElement (userRow) ; 

1257 } 

1258 } 
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1259 } 

1260 . catch ( JdbcException je) { 

1261 * trcfce ("Error retrieving card by id " + nextid + : + 

1262 je.getMessage ( ) ) ; 

1263 cards = null; 

1264 } 
1265 

1266 connMgr . f reeConnection ( jdbc) ; 

1267 

1268 return cards; 

1269 } 
1270 

1271 /** 

1272 * Convenience method which combines several rows of data into one 

1273 * Hashtable, Each resulting key in the Hashtable is suffixed by 

1274 * a cardinal number for the row number. 

1275 * . H 

1276 * @param tableName The name of the table being processeo 

1277 * @param allocatedRows The number of rows per user. For example, 2. 

1278 * may be allowed per user. 

1279 * eparam data The data from the table consisting of a Vector of 

1280 Hashtables ^ ^ _ 

1281 * @param outData The Hashtable into which the contents of data are 

1282 combined 

1283 */ 

1284 private void addMultiRowTokens ( String tableName, 

1285 short allocatedRows, Vector data, 

1286 Hashtable outData, 

1287 boolean checkedNameVal) { 

1288 if (data != null && tableName != null) { 

1289 Enumeration table = data . elements () ; 

1290 short rowNo = 1 ; « 

1291 // System. out. print In ("addMultiRowTokens: " + allocatedRows + 

1292 rows") ; 

1293 while (table . hasMoreElements () ) { 

1294 Hashtable row = (Hashtable) table . nextElement {) ; 
1295 

1296 String suffix = new Short ( rowNo++ ). toString () ; 

1297 Enumeration colnames = row. keys (); 
1298 

1299 while (colnames . hasMoreElements () ) { 

1300 String key = (String) colnames . nextElement () ; 

1301 String newKey - key + "_" + suffix; 

1302 outData. put (newKey, row , get ( key ) ) ; 

1303 // System. err.println( "Adding multirowtoken [ + 

1304 newKey +"]" + " = " + row. get ( key) ) ; 

1305 } 

1306 } 

1307 String id = tableName + "Id" + "_" ; 

1308 for (short i=rowNo, j=-l; i<=allocatedRows ; i++, j ) { 

1309 out Data. put (id + new Short ( i ). shortValue () , new Long(j)); 

1310 // System. err. println("Adding multirowtoken " + id + r 

1311 Short (i) .ShortValue () + "=" + new Long(j)); 

1312 } 
1313 

1314 // Get labels for the types. We have 2 situations here. 

1315 // 1. Actual choices for an input screen. The selected type is 

1316 // worked out from the database via methods other than this. 

1317 // However, all of the available labels come from the lookup 

1318 table 
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1319 // They are added to the token table. 

1320 a // 2. Static display of a card type. We pull out the type from the 

1321 // token table (as from DB) and replace it with a value from the 

1322 // lookup table. 

1323 Short category=null; 
1324 

1325 if (tableName- equals ("address") ) 

1326 category = LookupCache . ADDRESS; 

1327 else if (tableName . equals ( "email" ) ) 

1328 category = LookupCache. EMAIL ; 

1329 else if (tableName . equals ( "phone" ) ) 

1330 category = LookupCache- PHONE; f 

1331 else if ( tableName . equals ( "userinfo" ) ) 

1332 category = LookupCache . USERINFO; 

1333 else { 

1334 System.err.println ("ERROR: Unknown table"); 

1335 } 

1336 if (checkedNameVal) { 

1337 lookupCache.addLookupTokens (category, outData) ; 

1338 } 

1339 else { 

1340 lookupCache.replaceLookupTokens (category, 

1341 "opt"+tableName+"Type_", 

1342 allocatedRows, 

1343 outData) ; 

1344 } 

1345 } 

1346 } 
1347 

1348 /** 

1349 * Add the cardid to the personal List of userld, also add a default 

1350 * public privacy access row of the card owner to the private 

1351 * list of the user. 
1352 

1353 * @param jdbc An open database connection 

1354 * @param userld The user whose Personal List is being updated 

1355 * eparam cardid Userld of user being added to the Personal List 
1356 

1357 * ©return The record number from the PersonalList table 

1358 . .^w 

1359 private long addCardToPersonalList ( DatabaseConnection jdbc, 
1350 long userld, long cardid) 

1361 throws JdbcException 

1362 { 

1363 long listid = -1; 
1364 

1365 // XXXX just try to insert and catch dups const ramt^expectxon 

1366 if (jdbc. PersonalList (). IsCardThere (userld, cardid) =- false) { 

1367 trace("card not there"); 

1368 listid = jdbc. PersonalList () .Insert (jdbc, listid, userld, 
1359 cardid, PUBLIC_ACCESS) ; 

1370 } 

1371 else 

1372 trace ("card already there"); 

1373 return listid; 

1374 } 
1375 

1376 

1377 * Add to Private list 

1378 * 
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1379 * @param jdbc An open database connection 

1380 f @param userld Userld of user being added to the Private List 

1381 * epar'am cardid The user whose PrivateList List is being updated 

1382 * @param mask The numeric that signifies level of privacy 
1383 

1384 * @return The record number from the PrivateList table 

1385 */ . .^w 

1386 private long addUserToPrivateList ( DatabaseConnect ion jdbc, 

1337 long userld, long cardid, short mask) 

1388 throws JdbcException 

1389 { 

1390 long listid = -1; 

1391 String[] columnNames = jdbc. PrivateList (). getColumnNames () ; 

1392 String [] row = new String [columnNames . length] ; 
1393 

1394 row[0] = new Long (listid) . toString () ; 

1395 row[l] = new Long (userld) , toString () ; 

1396 row [2] = new Long (cardid) . toString () ; 

1397 row [3] = new Short (mask) . toString () ; 
1398 

1399 listid = jdbc.PrivateListO .Insert (userld, row) ; 
1400 

1401 return listid; 

1402 } 
1403 

1404 /** 

1405 * Build up tokens for Personal Card List by Querying DB 

1406 * 

1407 * 0param jdbc An open database connection 

1408 * @param userld The user whose Personal List is being displayed 

1409 * eparam tokens Hashtable to which the display tokens are added 

1410 * 

1411 * (Breturn The record number from the PersonalList table 

1412 */ 

1413 'private boolean displayCardListPersonal ( DatabaseConnection ^dbc, 

J414 long userld, Hashtable tokens) 

1415 throws JdbcException, lOException 

1416 { 

1417 boolean ret=false; 

1418 Vector personalListRows = null; 
1419 

1420 personalListRows = jdbc . PersonalList (). QueryJoinByUserld (userld) ; 
1421 

1422 // enum through returned rows, adding the privacy mask given by this 

1423 // user to this card, also check for any private fields on the card 

1424 // that cannot be displayed to the user 

1425 Enumeration list = personalLis tRows . elements () ; 

1426 while ( list . hasMoreElements ( ) ) { 

1427 Hashtable card = (Hashtable ) list . nextElement () ; 

1428 // Is the usersid really an integer XXX ??? 

1429 long cardid - (( Integer ) card. get (USERSID_COL) ). longValue () ; 

1430 // Remove fields that should not be displayed and add privacy mask 

1431 // to card 

1432 short mask = checkPrivacyAccess ( jdbc, cardid, userld, cara; , 

1433 } 
1434 

1435 HTMLDocument.buildListTokens (PERSONALLISTITEMS_TOKEN, 

J435 "PersonalList Item. html", 

1437 personalListRows, tokens, true); 

1438 ret = true; 
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1439 

1440 . return ret; 

1441 } 
1442 

1443 /** 

1444 * Build up tokens for Personal Card List by Querying DB 

1445 * 

1446 * Gparam jdbc An open database connection 

1447 * @param userld The user whose Personal List is being displayed 

1448 * Qparam tokens Hashtable to which the display tokens are added 
1449 

1450 * ©return The record number from the PersonalList table 

1451 */ 

1452 private boolean displayCardListDownload (DatabaseConnection jdbc, 

J453 long userld, Hashtable tokens, 

1454 Hashtable downloadlds) 

1455 throws JdbcException, lOException 

1456 { 

1457 boolean ret=false; 

1458 Vector personalListRows = null; 

1459 Vector downloadListRows = new Vector {) ; 
1460 

1461 trace ("displayCardListDownload for " + userld); 

1462 

1463 personalListRows = jdbc. PersonalList (). QueryJoinByUserld (userld) ; 

1464 

1465 Enumeration list = personalListRows . elements () ; 

1466 while (list . hasMoreElements ( ) ) { 

1467 Hashtable card = (Hashtable) list . nextElement () ; 

1468 // Is the usersid really an integer XXX ??? 

1469 long personalld = 

1470 ( (Integer) card. get ( PERSONALLISTID_COL) ) . longValue () ; 

1471 long cardid = (( Integer ) card. get ( USERSID_COL) ). longValue () ; 
1472 

1473 if (downloadlds . containsKey (new Long (personalld) ) ) ( 

1474 downloadListRows.addElement (card) ; 

1475 trace ("Adding download id=" + cardid); 

1476 } 

1477 } 

1478 , . ^ 

1479 // enum through returned rows, adding the privacy mask given by tnj 

1480 // user to this card, also check for any private fields on the care 

1481 // that cannot be displayed to the user 

1482 list =^ downloadListRows . elements () ; 

1483 while (list . hasMoreElements {) ) { 

1484 Hashtable card = (Hashtable) list . nextElement () ; 

1485 // Is the usersid really an integer XXX ??? 

1486 long personalld = 

1487 ( (Integer) card. get ( PERSONALLISTID_COL) ) . longValue ( ) ; 

1488 long cardid = (( Integer ) card. get (USERSID_COL) ). longValue () ; 

1489 // Remove fields that should not be displayed and add privacy mas 

1490 // to card 

1491 short mask = checkPrivacyAccess ( jdbc, cardid, userld, card); 

1492 } 
1493 

1494 HTMLDocument .buildListTokens (LISTITEMS_TOKEN, 

1495 "DownloadListItem.html", 

1495 downloadListRows, tokens, true); 

1497 ret = true; 

1498 
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1499 return ret; 

1500 }* 
1501 

^**used when a user clocks on acceptance URL. The User is moved from 
1504 iUser 

505 * to Users 

506 V . • 

1507 public void confirmUser (String sessionld, 
j^Qg Session session, 

icAo String eCardId, 

HttpServletRequest req, HttpServletResponse 

1511 resp, 

Hashtable tokens) 

1513 throws ServletException, SessionAccessException, lOException 

1514 { 

1515 DatabaseConnect ion j dbc=null ; 

1516 Hashtable userRow = null; 

1517 inactiveDatabaseConnection conn; 

1518 String [] columnNames ; 

1519 String [] row; 

1520 long newUserld = -1; ^^r.^mT:^Tr^ n^nns . 

1521 String createld = getServletParameter (req, CREATEID_TAG) , 

1522 

1523 try { 

1524 try { 

1525 . , ^ 

1526 jdbc = connMgr . getConnection ( ) ; 

1S97 if (idbc == null) { ^. rt\ 

J528 throw new JdbcExcept ion ( "Unable to get JDBC connection ); 

1529 } 
1530 

1531 } 

1532 catch ( JdbcException je) { ^ ^ " " 

1533 trace ("Unable to confirm user " + eCardId + : 

1534 j e , getMessage ( ) ) ; 

1535 if (jdbc 1= null) 

1536 connMgr. freeConnect ion (jdbc) ; ^u^„c=^-r." 

1537 sendError (tokens, "A occurred while trying to confirm the user , 

1538 je. getMessage 0 r resp) ; 

1539 return; 

1540 } 
1541 

1543 ^""^IwUserld = jdbc . User {). ConfirmUser (eCardId, createld); 

1544 } 

1545 catch (JdbcException je) { . ... „ ^ r^.^HTH + + 

1546 trace ("Unable to confirm user with + eCardId + . 

1547 je. getMessage () ) ; 

1548 if (jdbc != null) 

1549 connMgr. freeConnect ion (jdbc) ; *-K^„<=^r^" 

1550 sendError (tokens, "A occurred while trying to confirm the user , 

1551 je. getMessage 0 , resp); 

1552 return; 

1553 } 
1554 

1555 if (jdbc != null) { 

1556 connMgr , freeConnection( jdbc) ; 

1557 jdbc = null; 

1558 } 
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1559 
1560 
1561 
1562 
1563 



trace ("Confirmed User: " + eCardId + " + newUserld) ; 

// If the user was added when trying to add a card their list 
// the URL will have a CARDID^TAG. Will add the card to thexr 



1566 
1567 

1568 try { 

1569 
1570 



1565 StriircardldTag = getServletParameter (req, CARDID_TAG) ; 

if (newUserld > 0 && cardldTag != null && cardldTag != "") ( 

Long cardid - new Long (getServletParameter (req, CARDID_TAG).) ; 

1571 idbc = connMgr.getConnectionO ; , w i ^ % \ - 

1572 iddCardToPersonalList(jdbc, newUserld, cardid. longValue ()) , 

1573 } 

1574 catch ( JdbcException je) { , • 4. 4. 

1575 trace ("Unable to add user to personal list: + 

1576 eCardId + ":" + je . getMessage ( ) ) ; 

1577 if (jdbc != null) 

1^70 connMar . freeConnect ion ( jdbc) ; 

sendError (tokens, "An error occurred while to add the card to 

1580 the personal list", 

15gl je. getMessage {) , resp) ; 

1582 return; 

1583 } . ^ ^ r 

1584 catch (NumberFormatException nte) { 

15g5 // Must be a bad cardid. Ignore. 

1586 } 

1587 } 
1588 

1589 if (jdbc != null) 

1590 connMgr. freeConnect ion (jdbc) ; 

1591 

1592 if (newUserld > 0) { 

1593 session. setObject(SESS__USER_TAG, eCardId) ; ^^thm • 

1594 session. setObject(SESS^USER_ID_TAG, new Long (newUserld) ) , 

1595 } . o .^ 

1596 StringBuffer url = new StringBuf f er ( ) ; 



1597 

1598 
1599 



url. append (getProperty( "ecardfiie.http. url") ) ; ^ 
url . append (get Property ( "ecardf ile . html . servletalias ) ) , 

1600 url.append("/SearchServlet?") ; mwFTTMF TAG^ • 

1601 url. append (OP_TAG); ur 1 . append ( "=^" ) ; url . append (ONETIME_TAG) , 

\tll ur^.SpSndl^C^^^^ TAG); url . append (" = ") ; url . append ( eCardXd) ; 

l±:ilTnV^^^^^^^^^ ; ur 1. append (" = ") ; url . append ( sessionid) ; 

1606 tokens.put (URL_TOKEN, ur 1 . toString ( ) ) ; 

1607 

1608 if (newUserId>0) _„ ^^or^^ . 

1609 sendParseDocument (tokens, "OneTimeWelcome.html , resp), 

1610 else if ( newUserId==0) { ^. • « „«o-r " +prardld 

1611 sendError (tokens, "An occurred while confirming 

[612 "You have probably been added to the system previously. , 

1613 resp) ; 

1614 } 

1616 ""'sendError (tokens, "An occurred while confirming user " ^eCardld, 

1617 ""^ resp); 

1618 ) 
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1619 catch (Exception e) { 

1620. • System.err.println( "******** 

1621 e'.printStackTrace (System, err) ; 

1622 } 

1623 ) 

1625 private Vector getMultiRowValuesFromForm (HttpServlet Request req, 
loz^ ^ String [] columnNames) { 

1627 Vector rows = new Vector ( ) ; 

1629 // Look for first value that should be there (id and userld not there 

1630 // for new user 

1631 int i = 1; , 

1632 String strl = new Integer ( i ). toString () ; 

1633 String szValue = null; 
1634 

1635 strl = "_" + strl; 
1636 

1638 ^""^slvalue = req. get Par ameterVa lues (columnNames [2 ] + strl)[0]; 

1639 } 

1640 catch (NullPointerException ne) { 

1641 szValue = null; 

1642 } 
1643 

1644 while (szValue !- null) { 

1645 String [] row = new string [columnNames . length] ; 

1646 for (int j = 0; j < columnNames . length; j++) { 

^^^row[j] = req. getParameterValues (columnNames [j] + strl) [0] ; 

1649 } . ^ X 

1650 catch (NullPointerException ne) I 

1651 szValue = null; 

1652 } 

1653 } 

1654 rows . addElement (row) ; 

1655 strl = new Integer (++i ). toString () ; 

1656 strl = + strl; 

^^^szValue = req. getParameterValues (columnNames [2 ] + strl)[0]; 

1659 } 

1660 catch (NullPointerException ne) { 

1661 szValue = null; 

1662 } 

1663 } 

1664 return rows; 

1665 } 

1667 private Vector getMultiRowValuesFromForm ( HttpServletRequest req, 

1^ ^ String [] columnNames, 

16oo ^ . , 

String rowIdTag) { 

1670 int maxRows = 10; 

1671 Vector rows = new Vector () ; 

1672 String rowIds[] = new String [maxRows] ; 

1673 ^ 

1674 trace ("getMultiRowValuesFromForm " + rowIdTag); 

1675 if (rowIdTag != null) { 

1676 String rowIdsVal[] = req . get ParameterValues ( rowIdTag) ; 
1677 

1678 if (rowIdsVal != null) 
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1679 for (int i=0; KrowIdsVal - length; i++) 

1680 . rowIds[i] = rowIdsVal [i] ; 

1681 }' " 

1682 . . _x 

1683 for (int i=rowIds . length, j=-l; KmaxRows; D J 

1684 rowIds[i] = new Integer (j ). toString () ; 
1685 

1686 // Look for first value that should be there (id and userld not thei 

1687 // for new user 

1688 int i = 0; 

1689 String szValue = null; 
1690 

1691 String strl = + rowIds[i]; 
1692 

1694 szValue = req . getParameterValues (columnNames [2] + strl)[0]; 

1695 } 

1696 catch (NullPointerException ne) { 

1697 szValue = null; 

1698 } 
1699 

1700 trace ("szValue = " + szValue); 

1701 while (szValue i= null) { 

1702 String [] row = new String [columnNames - length] ; 

1703 // Don't get IDs out in for loop. Otherwise we we need to compare 

1704 // each column name against rowIdTag. String comparisons and 

1705 // assignments aren't exactly fast in Java, So start from 1 since 

1706 // the id is in 0. 

1707 ^ ^ 

1708 for (int j = 1; j < columnNames. length; D-*""*") i 

1709 try { 

1710 row[j] = req. getParameterValues (columnNames [j] + strl)[0]; 

1711 } 

1712 catch (NullPointerException ne) { 

1713 szValue = null; 

1714 } 

1715 } 

1716 row[0] = rowIds[i]; // Now assign the ID 

1717 trace ("getMultiRowValuesFromForm row = " + row); 

1718 rows. addElement (row) ; 
1719 

1720 strl = rowIds(++i]; 

1721 strl - "_" + strl; 

1722 try { 

1723 szValue = req. getParameterValues (columnNames [2] + strl)[0]; 

1724 } 

1725 catch (NullPointerException ne) { 

1726 szValue = null; 

1727 } 

1728 } 

1729 return rows; 

1730 } 
1731 

1732 private Vector convertMultiRowHashes (Vector hashes. String [] 

1733 columnNames, 

J734 int[] columnTypes) 

1735 { 

1736 Vector rows new Vector (); 

1737 Enumeration enum ^ hashes . elements () ; 
1738 
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1739 while (enum. hasMoreEleraents ( ) ) { 

1740 , String [] row = new String [columnNames . length] ; 

1741 ' H^shtable h = ( Hasht able) enum. nextElement () ; 

1742 w • X / 

1743 for (int j=0; j < columnNames . length; 3++) t 

1744 switch (columnTypes [ j ] ) { 

1745 case java . sql . Types . BIGINT : 

1745 row[j] - + h.get (columnNames[j] .toUpperCaseO ) ; 

1747 break; 

1748 case j ava . sql . Types . Sb4ALLINT : 

1749 row[j] = + h.get (columnNames [j] .toUpperCaseO ) ; 

1750 break; 

1751 case j ava. sql .Types . CHAR: 

1752 row[j] = (String)h.get (columnNames[jl .toUpperCasei) ) ; 

1753 break; 

1754 default: 

1755 row[j] = (String)h.get (columnNames[j] .toUpperCaseu } r 

1756 break; 

1757 } 

1758 } 

1759 rows.addElement (row) ; 

1760 } 

1761 return rows; 

1762 } 

1763 . 

1764 public void displayPersonalList (String sessionld, 
1755 Session session, 

1755 HttpServletRequest req, 

1757 HttpServletResponse resp, 

1753 Hashtable tokens) 

1769 throws ServletException, SessionAccessException, lOException 

1770 { 

1771 DatabaseConnection jdbc=null; 

1772 Long userld = (Long) session. getObject (SESS_USER_ID_TAG) ; 

1773 String eCardId = (String) session. getObj ect (SESS_USER_T AG) ; 
1774 

1775 if (eCardId != null) 

1775 tokens. put ( ECARDID_TOKEN, eCardId) ; ; 

1777 

1778 try { 

1779 jdbc = connMgr.getConnectionO ; 

1780 if (jdbc == null) { mx 

1781 throw new JdbcException ( "Unable to get JDBC connection ); 

1782 } 



1783 
1784 



displayCardListPersonaKjdbc, userld. longValue () , tokens); 

1785 } 

1786 catch (JdbcException je) { . ^ „ ^ r^.^nrH + " (" 

1787 trace ("Unable to get Personal List! for + eCardId + ( 

1788 userld + 

1789 ") : " + je.getMessage () ) ; 

1790 } 
1791 

1792 if (jdbc != null) 

1793 connMgr . freeConnection ( jdbc) ; 
1794 
1795 

1796 } 
1'797 

1798 public void displayDownloadList (String sessxonid. 



sendParseDocument (tokens, "PersonalList.html", resp) ; 
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1799 Session session, 

1800 ^ HttpServletRequest req, 

1801 ' * HttpServletResponse resp, 

1802 Hashtable tokens) 

1803 throws ServletException, SessionAccessException, lOException 

1804 { 

1805 DatabaseConnection jdbc=null; 

1806 Long userld = (Long) session. getObject (SESS_USER_ID_TAG) ; 

1807 String eCardId = (String) session. getObject (SESS_USER_TAG) ; 

1808 String subop = getServlet Parameter (req, OP_TAG) ; 
1809 

1810 if (eCardId != null) 

1811 tokens. put (ECARDID_TOKEN, eCardId) ; 
1812 

1813 if (subop. equals (DOWNLOADSINGLE_TAG) ) { 

1814 String cardid = getServletParameter (req, CARDID_TAG) ; 

1815 String firstName = getServlet Parameter ( req, FIRSTNAME_TAG) ; 

1816 String lastName = getServletParameter (req, LASTNAME_TAG) ; 

1817 String companyName = getServletParameter (req, COMPANYNAME_TAG) ; 

1818 Hashtable singleCard = new Hashtable () ; 

1819 Vector downloadListRows = new Vector (); 
1820 

1821 tokens. put (OP_TOKEN, DODOWNLOADSINGLE_TAG) ; 
1822 

1823 singleCard. put (USERSID_COL, new Integer (cardid) ) ; 

1824 singleCard. put (FIRSTNAME_COL, firstName) ; 

1825 singleCard. put ( LAST NAM E_COL, lastName) ; 

1826 singleCard. put (C0MPANYNAME_COL, companyName) ; 

1827 downloadListRows -addElement (singleCard) ; 
1828 

1829 HTMLDocument.buildListTokens (LISTITEMS_TOKEN, 

1 830 " Down 1 o adLi s 1 1 1 em . html " , 

1831 downloadListRows, tokens, true) ; 

1832 } 

1833 else { 

1834 // loop through parameters 

1835 int cnt=0; 
1836 

1837 Enumeration InputFieids = req . get ParameterNames ( ) ; 

1838 Hashtable downloadlds new Hashtable () ; 
1839 

1840 tokens. put (OP_TOKEN, DODOWNLOADPLIST_TAG) ; 
1841 

1842 while ( inputFields . hasMoreElement s () ) { 

1843 String key = { String) inputFields . nextElement () ; 

1844 if (key.indexOf (DELETE_TAG) ==0) { 

1845 // if parameter is Update^, extract id 

1846 int start - DELETE_TAG . length ()+ 1 ; 

1847 int underscore = key . indexOf ( , start); 

1848 trace (DELETE_TAG+ " key=" + key + " underscore=" + 

1849 underscore) ; 

1850 if (underScore>0) { 

1851 ++cnt; 

1852 downloadlds. put (new Long ( key . substring ( start , 

1853 underscore )),"!"); 

1854 trace ( "selected download id=" + key . substring ( start , 

1855 underscore) ) ; 

1856 trace ("done") ; 

1857 } 

1858 } 
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1859 } 

1860 if (cnt ==0) { 

1861 "sendError (tokens, ^ r^r-ohAhlv 
III2 "Your downloaded personal list is empty. You probably 

1863 didn't select any cards from your personal list before pressing 

1864 <I>Download</I>."/ , ^ ^^=,-;r> " 
1365 "Press the <I>Back</I> button and try again. , 

1866 resp) ; 

1867 return; 

1868 } 
1869 

1870 try { 

1871 jdbc = connMgr.getConnection 0 ; 

1X77 if (idbc == null) { ^. mx 

1873 throw new JdbcException ( "Unable to get JDBC connection ), 

1874 } 
1875 

1876 displayCardListDownload(jdbc, userld. longValue (), tokens, 

1877 downloadlds) ; 

1878 } 

1879 catch (JdbcException je) { . . ^ x ^r^^-rHTH + " (' 

1880 trace ("Unable to get Download List! for + eCardId + \ 

1881 userld + 

1882 ") : " + je -getMessage ( ) ) ; 

1883 } 
1884 

1885 } 

1886 if (jdbc != null) 

1887 connMgr. freeConnect ion (jdbc) ; 



+ 



sendParseDocument (tokens, "DownloadList.html", resp) ; 



1888 
1889 
1890 } 
1891 

1892 public void downloadPalmCSV ( long logmld, 

1893 HttpServletRequest req^ 

1894 HttpServletResponse resp, 

1895 Hashtable tokens) 

1896 throws ServletException, lOException 

!898 * String downloadlds t] = req.getParameterValues {DOWNLOADID_TAG) ; 

1899 Vector downloadRows = null; 

1900 

1901 if (downloadlds != null) { 

1902 if ((downloadRows = getCards ( loginid, downloadlds)) 

1903 i= null) { . „ 

1904 sendCSVfile("ListOnly.txt", "PalmCSVItem.txt , 

1905 tokens, downloadRows, resp) ; 

1906 } 

1907 else { 

1908 sendError (tokens, ^^^^i lioi-" 
909 "An error occured while downloading your personal list , 

1910 "Please try again or contact eCardfile.com. 

1911 resp); 

1912 } 

1913 } 

1914 else { 

1915 sendError (tokens, r^voh;:.hl v 

1916 "Your downloaded personal list is empty. You probably 

1917 didn't select any cards from your personal list before pressing 

1918 <I>Download</I>. 
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1919 "Press the <I>Back</I> button and try again.", 

1920 . resp) ; 

1921 } 

1922 } 
1923 

1924 public void downloadCEExchange (long loginid, 

1925 HttpServletRequest req, 

1926 HttpServletResponse resp, 

1927 Hashtable tokens) 

1928 throws ServletException, lOException 

1929 { 

1930 String downloadlds [ ] = req. get Par ameterVa lues ( DOWNLOAD I D^TAG) ; 

1931 Vector downloadRows = null; 
1932 

1933 if (downloadlds null) { 

1934 if ((downloadRows == getCards ( loginid, downloadlds)) 

1935 != null) { 

1936 sendCSVfile ("Exchange. txt", "Exchangeltem.txt , 

1937 tokens, downloadRows, resp) ; 

1938 } 

1939 else { 

1940 sendError (tokens, „ 

1941 "An error occured while downloading your personal list , 

1942 "Please try again or contact eCardfile.com. ", 

1943 resp) ; 

1944 } 

1945 } 

1946 else { 

1947 sendError (tokens, 

1948 "Your downloaded personal list is empty. You probaDly 

1949 didn't select any cards from your personal list before pressing 

1950 <I>Download</I>. ", 

1951 "Press the <I>Back</I> button and try again. , 

1952 resp) ; 

1953 } 

1954 } 
1955 

1956 void sendCSVfile (String csvFile, String formatFile, 

1957 Hashtable tokens. Vector downloadRows, 

1958 HttpServletResponse resp) 

1959 throws lOException { 

1960 HTMLDocument .buildListTokens (LISTITEMS_TOKEN, formatFile, 
1951 downloadRows, tokens, false) ; 

1962- 

1963 sendParseTextFile("text/x-csv", tokens, csvFiie, respj ; 

1964 } 
1965 

1966 public void addPersonalList (String sessionid, 

1967 Session session, 

1968 HttpServletRequest req, 
1959 HttpServletResponse resp, 
197Q Hashtable tokens) 

1971 throws ServletException, SessionAccessException, lOException 

1972 { 

1973 DatabaseConnection jdbc=null; 

1974 long userld = 

1975 { (Long) session. getObject ( SESS_USER_ID_TAG ) ) . longValue { ) ; 

1976 String eCardId = ( String) session . getObj ect ( SESS__USER_TAG) ; 

1977 long cardid = (new Long (getServlet Parameter ( req, 

1978 CARDID_TAG) ) ) . longValue ( ) ; 
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1980 if (eCardId != null) 

1981 tiDkens .put (ECARDID_TOKEN, eCardId) ; ; 
1982 

1983 try { 

1984 jdbc = connMgr . getConnection ( ) ; 

1985 if (jdbc == null) { 

1986 throw new JdbcException { "Unable to get JDBC connection"); 

1987 } 

1988 if (userld == cardid) { 

1989 // Can't add own card to list, add error message XXX 

1990 displayCardListPersonal ( jdbc, userld, tokens); 

1991 ) 

1992 else if (addCardToPersonalList ( jdbc, userld, cardid) > -1) { 

1993 displayCardListPersonal ( jdbc, userld, tokens) ; 

1994 } 

1995 else { 

1996 // Card is already there, need to add error message XXX 

1997 displayCardListPersonal ( jdbc, userld, tokens); 

1998 } 

1999 } 

2000 catch (JdbcException je) { 

2001 trace ("Unable to add user to personal list: " + 

2002 eCardId + ":" + je - getMessage () ) ; 

2003 } 
2004 

2005 if (jdbc != null) 

2006 connMgr. freeConnect ion (jdbc) ; 
2007 

2008 sendParseDocument (tokens, "PersonalList.html", resp) ; 

2009 } 
2010 

2011 public void oneTimeWelcome { String sessionid, 

2012 Session session, 

2013 HttpServletRequest req, 

2014 HttpServletResponse resp, 

2015 Hashtable tokens) 

2016 throws ServletExcept ion, SessionAccessException, lOException { 

2017 sendParseDocument (tokens, "OneTimeWelcome.html", resp) ; 

2018 } 
2019 

2020 public boolean deleteUser ( String sessionid, 

2021 Session session, 

2022 HttpServletRequest req, 

2023 HttpServletResponse resp, 

2024 Hashtable tokens) 

2025 throws Servlet Exception, SessionAccessException, lOException 

2026 { 

2027 String msg=""; 

2028 DatabaseConnection jdbc=null; 

2029 long loginid = 0; 
2030 

2031 if ( isLoggedIn (sessionid, session)) { 

2032 // get the userid if they have logged in 

2033 loginid = ( (Long) session . getObject (SESS_USER_ID_TAG) ). iongValue () ; 

2034 try { 

2035 jdbc = connMgr .getConnection () ; 

2036 if (jdbc — null) { 

2037 throw new JdbcException ( "Unable to get JDBC connection"); 

2038 } 
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2039 int iRow = jdbc . User (). Delete ( jdbc, loginid) ; 

2040 » 

2041 y/ Logout the user out from the system 

2042 session. setObject {SESS_USER_TAG, "") ; 

2043 return true; 

2044 } 

2045 catch ( JdbcException je) { 

2046 trace ("Error deleting user " + je . getMessage ( ) ) ; 

2047 msg = je . getMessage () ; 

2048 if (jdbc != null) 

2049 connMgr . f reeConnection ( jdbc) ; 

2050 } 

2051 } 

2052 sendError (tokens, "A occurred while deleting the user", msg, resp) ; 

2053 return false; 

2054 } 
2055 

2056 public void changeDetails (long loginid, 

2057 Session session, 

2058 HttpServletRequest req, 

2059 HttpServletResponse resp, 

2060 Hashtable tokens) 

2061 throws ServletException, SessionAccessException, lOException 

2062 { 

2063 String eCardId = (String) session. getObject (SESS_USER_TAG) ; 
2064 

2065 if (eCardId != null) 

2066 tokens , put (ECARDID_TOKEN, eCardId) ; ; 

2067 „ 

2068 displayCard( loginid, eCardId, tokens, true, "ChangeDetails . html , 

2069 resp); 

2070 } 
2071 

2072 public void changeUserInf o ( long loginid, 

2073 Session session, 

2074 HttpServletRequest req, 

2075 HttpServletResponse resp, 

2076 Hashtable tokens, 

2077 short userinf oType ) 

2078 throws ServletException, SessionAccessException, lOException 

2079 { 

2080 String strCardId = getServlet Parameter ( req, CARDID_TAG) ; 

2081 if (strCardId != null && ! strCardId . equals ("") ) { 

2082 long cardid = (new Long ( strCardId) ). longValue () ; 

2083 tokens. put (CARDID_TOKEN, strCardId) ; 
2084 

2085 displayUserlnfo (loginid, cardId, tokens, userInf oType, CHANGE, 

2086 resp); 

2087 } 

2088 } 
2089 

2090 public boolean doChangeDetails (String sessionid, 

2091 Session session, 

2092 HttpServletRequest req, 

2093 HttpServletResponse resp, 

2094 Hashtable tokens) 

2095 throws ServletException, SessionAccessException, lOException 

2096 { 

2097 String msg=""; 

2098 DatabaseConnection jdbc=null; 
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2099 String eCardId = (String) session. getObject (SESS_USER_TAG) ; 

2100 ♦ String newECardId = getServlet Parameter (req, ECARDID_TAG) ; 

2101 long" loginid = 

2102 ( (Long) session . getObj act (SESS_USER_ID_TAG) ) .longValue ( ) ; 
2103 

2104 if (eCardId != null) 

2105 tokens. put (ECARDID_TOKEN, eCardId) ; ; 
2106 

2107 if ( ! validateUserForm(sessionId, session, newECardId, req, resp, 

2108 tokens)) 

2109 return false; 
2110 

2111 try { 

2112 jdbc = connMgr.getConnectionO ; 

2113 if (jdbc == null) { 

2114 throw new JdbcException ( "Unable to get JDBC connection" ) ; 

2115 } 

2116 String[] columnNames = jdbc . User (). getColumnNaities () ; 

2117 String[] row = new String [columnNames . length] ; 
2118 

2119 for (int i = 0; i < columnNames . length; i++) { 

2120 // row[i] = req. getParameterValues (columnNames [i] ) [0] ; 

2121 row[i] = req. getParameter (columnNames [i] ) ; 

2122 } 

2123 // get addresses, emails, phones 

2124 Vector addresses = getMultiRowValuesFromForm (req, 

2125 jdbc. Address ( ) . get ColumnNames () , 

2126 ADDRESS I D_TAG) ; 

2127 Vector emails = getMultiRowValuesFromForm ( req, 

2128 jdbc. Email () . get ColumnNames () , 

2129 EMAILID_TAG) ; 

2130 Vector phones = getMultiRowValuesFromForm ( req, 

2131 jdbc. Phone ( ) . getColumnNames ( ) , 

2132 PHONEID__TAG) ; 

2133 long iRow = jdbc. User (). Update (jdbc, row, addresses, phones, 

2134 emails) ; 
2135 

2136 connMgr . f reeConnection ( jdbc) ; 

2137 

2138 notif yCardSubscribers (loginid, newECardId) ; 

2139 

2140 // Update successful and user has changed their eCardId 

2141 if (iRow>0 && ! eCardId, equals ( newECardId) ) { 

2142 trace ("User " + eCardId + " has changed ID to " + newECardId); 

2143 session. setObject (SESS_USER_TAG, newECardId) ; 

2144 } 
2145 

2146 return true; 

2147 } 

2148 catch (JdbcException je) { 

2149 trace ("Error updating user " + j e . getMessage ( ) ) ; 

2150 msg = j e . getMessage () ; 

2151 if (jdbc != null) 

2152 connMgr. freeConnect ion (jdbc) ; 

2153 } 

2154 sendError (tokens, "An error occurred while updating the user , msg, 

2155 resp); 

2156 return false; 
2157 

2158 } 
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2159 

2160 void notifyCardSubscribersClong loginid. String eCardId) { 

2161 EcartiNotifier notifier = new EcardNotif ier ( thxs, loginid, eCardld) , 

2162 notifier, start () ; 

2163 } 

2164 . 

2165 public boolean doAddUserInf o (long loginid, 

2155 Session session, 

2157 HttpServletRequest req, 

2i5g HttpServletResponse resp, 

2159 Hashtable tokens) 

2170 throws ServletException, SessionAccessException, lOException 

2171 { 

2172 String msg=""; 

2173 DatabaseConnection jdbc=null; 

2174 String eCardId = (String) session . getObject (SESS__USER__TAG} ; 
2175 

2176 tokens. put (USERSID_TOKEN, "" + loginId) ; 

2177 

2178 trace ("doAddUser Info for " + loginid) ; 

2179 if (eCardId 1= null) 

2180 t o kens. put (ECARDID_TOKEN, eCardId) ; 
2181 

2182 try { 

2183 jdbc = connMgr .getConnectionO ; 

2184 if (jdbc == null) { ^. „. 

2185 throw new JdbcExcept ion ( "Unable to get JDBC connection ), 

2186 } 
2187 

2188 Vector rows = getMultiRowValuesFromForm (req, 

2ig9 jdbc.UserlnfoO . getColumnNames ( ) ) ; 

2191 long iRow = jdbc . Userlnfo {). Update (logmld, rows), 

2192 

2193 connMgr . freeConnect ion (jdbc) ; 

2194 

2195 //notifyCardSubscribers (loginid, newECardId) ; 

2196 

2197 return true; 

2198 } 

2199 catch (JdbcExcept ion je) { 

2200 trace{"Error adding Userlnfo " + je . getMessage ( ) ) ; 

2201 msg = j e . getMessage () ; 

2202 if (jdbc != null) 

2203 connMgr . freeConnect ion (jdbc) ; 

2204 } 

2205 sendError (tokens, "An error occurred while adding the user 

2206 information" , 

2207 itisg, resp) ; 

2208 return false; 

2209 } 

2210 . 

2211 public boolean doChangeUserInf o ( long logmld, 

2212 Session session, 

2213 HttpServletRequest req, 

2214 HttpServletResponse resp, 

2215 Hashtable tokens) 

2216 throws ServletException, SessionAccessExcept ion, lOException 

2217 { 

2218 String msg=""; 
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2219 DatabaseConnection jcibc=null; ^,ci7cq m^fr TAG) - 

2220 ^ String eCardId = (String) session . getObDect (SESS^USER^TAG) , 

2221 • • - 

2222 tokens. put (USERSID_TOKEN, ""+loginId) ; 

2223 ^ . 

2224 trace ("doChangeUserlnfo for " + loginia) ; 

2225 if (eCardId != null) 

2226 tokens.put {ECARDID__TOKEN, eCardId) ; 
2227 

2228 try { 

2229 jdbc = connMgr . getConnect ion () ; 

97'^0 if (idbc === null) { ^- m\ 

2231 throw new JdbcException ( "Unable to get JDBC connection ); 

2232 } 
2233 

2234 Vector rows = getMultiRowValuesFromForm ( req, 

2235 jdbc, User Info () . getColumnNames ( ) , 

2236 USERINFOID_TAG) ; 
2237 

2238 trace ("doChangeUserlnfo about to update " + loginid) ; 

2239 long IRow = jdbc . Userlnfo (). Update (loginid, rows); 

2240 

2241 connMgr. f reeConnection (jdbc) ; 

2242 

2243 / /not if yCardSubscribers ( loginid, newECardId) ; 

2244 

2245 return true; 

2246 } 

2247 catch (JdbcException je) { 

2248 trace("Error updating Userlnfo " + je . getMessage ( ) ) , 

2249 msg = je , getMessage ( ) ; 

2250 if (jdbc != null) 

2251 connMgr. f reeConnection (jdbc) ; 



2252 } 
2253 



sendError (tokens, "An error occurred while updating the user 

2254 information", 

2255 msg, resp) ; 

2256 return false; 

2257 } 
2258 

2259 public boolean doUpdatePlist (String sessionid, 

2260 Session session, 

2261 HttpServletRequest req, 

2262 HttpServletResponse resp, 

2263 ' Hashtable tokens, boolean deleteltems) 

2264 throws ServletException, SessionAccessException, lOException 

2265 { 

2266 String msg=""; 

2267 DatabaseConnection jdbc=null; 

2268 int iRow = 0; 

2269 int start Privateld = 0; 

2270 long personalRowId = 0; 

2271 long privateRowId = 0; 

2272 short mask ^ 0; 
2273 

2274 trace ("doUpdatePlist") ; 

2275 

2276 try { 

2277 jdbc = connMgr . getConnect ion () ; 

2278 if (jdbc == null) { 
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2279 throw new JdbcException ( "Unable to get JDBC connection"); 

2280 „ > 

2281 /V loop through parameters 

2282 Enumeration inputFields = req . getParameterNames { ) ; 
2283 

2284 while (inputFields . hasMoreElements () ) { 

2285 String key = (String) inputFields . nextElement () ; 

2286 if (deleteltems key . indexOf (DELETE_TAG) == 0) < 

2287 //if parameter is Delete_, delete personal list row and 

2288 private ^^^^^^^ personal and private list row ids from 

2290 form 

2291 try { 

2292 startPrivateld - key . indexOf (ROWID__TAG) ; 

2293 personalRowId = , ^i./xj^n 

2294 ( new Long ( key . substring { DELETE_TAG . length ( ) +1 . 

2295 StartPrivateld) ) ) . longValue ( ) ; 

2296 privateRowId = 

2297 (new Long ( key . substring (startPrivateld + 

2298 ROWID TAG. length ()))). longValue () ; . r^^iM^t^ list item 

2299 // delete personal list item and associated P^^^^^e list item 

2300 trace{ "Deleting personalRowId ^ ^ privateRowId), . 

2301 jdbc.PersonalListO . Delete (jdbc, personalRowId, 

2302 privateRowId) ; 

2303 } 

2304 catch (Exception e) { ^ t 'm- 

2305 throw new JdbcException ( "Error in deleting personalList ), 

2306 } 

2307 } 

2308 else if ( key . indexOf (UPDATE_TAG) == 0) { 

2309 // if parameter is Update_, update privacy row 

2310 // extract row id and value 

2311 try { 

2312 privateRowId = 

2313 (new 

2314 Long ( key . substring ( UPDATE_TAG. length ( ) +1) ) ) . longValue ( ; , 

2315 mask = (new Short ( req, getParameter ( key) )). shortValue (), 

2316 iRow = jdbc.PrivateList().UpdateMask(privateRowId, mask), 

2317 } 

2318 catch (Exception e) { . ^^t-s^i-'m. 

2319 throw new JdbcException ( "Error in updating privateList ), 

2320 } 

2321 } 

2322 } 
2323 

2324 connMgr . f reeConnection ( jdbc) ; 
2325 

2326 return true; 

2327 } 

2328 catch (JdbcException je) { 

2329 trace ("Error updating private list " + je . getMessage ( ) ) ; 

2330 msg = j e . getMessage () ; 

2331 if (jdbc 1= null) 

2332 connMgr. f reeConnection ( jdbc) ; 

2334 LndError (tokens, "A occurred while updating the private list", msg, 

2335 resp) ; 

2336 return false; 
2337 

2338 } 
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2339 

IZ '^*c>,eA= .11 values i„ t.. era th.t is -^-t to J^^f^J^J;^, 

2342 * if the privacy value for any value is higher ^,1^ and 

2343 * by the card's owner the element is removed from the hashtable 

2344 * the value is not displayed. 



2345 



2346 * eparam jdbc An open database ^3^^ (0 if not logged 

2347 * @param userld user id of currently logged in use 

2349 '''' * eparam cardid user id of the card details being -decked 

2350 * eparam cardRow Hashtable from which the elements are removed 

2352 ;ublic Short checkPrivacyAccess ( --^-^^^-^f^i^^i^^^d, 

nil Hashtable cardRow) { 

2354 

2355 

2356 short privacyLevel = PUBLIC_ACCESS; 

2357 

2358 try { 

2359 if (userld > 0) { . • ^ 

2360 // Look up the privacy level for thxs pair 

2361 

llli // If there is a privacy level put it in the card 

2367 cardRow.put{MASK_COL, new Short (privacyLevel) ) ; 

cardRow. put (PVTLISTID_COL, new Long (plld) ) , 

mi II trace ("Privacy level: + 

2369 // ..User=" + userld + " Card=" + cardid + 

2371 ":" + privacyLevel); 

2372 } . . X r 

2373 catch ( JdbcException :)e) { 

2374 //no privacy row in db 

2375 privacyLevel = PUBLIC_ACCESS ; 

2376 } 

2377 } 

2378 } 

2379 catch (Exception e) { ^ i .. 

2380 trace ("Unable to find privacy level: + 

2381 "User=" + userld + " Card=" + cardid + . + 

2382 e.getMessage {) ) ; 

// pvttitle and title elements from hashtable. 



Enumeration keys = cardRow. keys () ; 



2388 
2389 

2390 , ^ . , 

2391 while ( keys . hasMoreElements ( ) ) i 

2392 String key = ( String ) keys . nextElement () ; 

2393 // for every element that has a key of something like PVT or p 

2394 if (key.indexOf(PRIVACYPREFlX) == 0) { poxvACYPREFIX) ?? as 

2395 // XXX have something like key . mdexOf (LC^PRIVACYPREt ix; 

2396 well 

nil "'siort tokenPrivacy = ( (Short ) cardRow. get ( key) ). shortValue () ; 
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2399 if (tokenPrivacy > privacyLevel) { 

2400 .. cardRow. remove (key) ; „.,v.^or.t- i-r>ke:>n 
,4m '■' ■ ' // extract out the PRIVACYPREFIX from the current token 

// and use this to remove the actual column value as well 
^JSa // trace (cardid + ":Removing Tokens: + 

2404 tokenPrivacy + "/" + , t«.,o1 + •■ •• + kev + + 

2405 // privacyLevel + + Key -i- / 

2406 // 

240, .'.y--'.=trin,,PRIVJC.t^EriX^le„,tM,,,^ 

2409 } 

2410 } 

7411 catch (Exception e) { ^ ^^ 

2412 // any mess up don't display the token, should catch 

2413 exceptions 

2414 // again and abort XXX 

trace ("Invalid privacy level: " + . „ ^ 

cardid + " field = " + key + " level = + 
cardRow, get (key) + + e . getMessage ( ) ) ; 

941 « cardRow. remove ( key ) ; , 

cSRow.remove(key.substring(PRIVACYPREFIX.leng^ 
StringBuffer strBuf = new stringBuffer (key . substring ( 0, 2 )) , 



2415 
2416 
2417 



2419 
2420 

2421 } 

2422 } 

2423 } 

2424 return privacyLevel; 

2425 } 

2426 } 
2427 
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^1 Ecardfilc.com 


- Home - 


Microsoft Internet Explorer 








Favorites' 
















^^^^ 



Ecardiile.coin - Search 



EcHd: 



First 
Name: 



OR 



Last r 
Name: 



Add User 
Personal List 
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I Boomerang - New User - Microsoft Internet Explorer 



O-v ft^y i^%%.'iriw- '.U Q life* 



ANewUser.htfiJ 



Ecardfile^com - New User 



tide: 

fb-stName: 
middleName: 
lastNaine: 
snfiRx: 

compaityName: 
jobXide: 

biuanessCominent 
webFageUEU.: 



password: 



iRetype> password:! 



lemailAnth:] 



j Business Address I 



City: 

State/IVovmce : 

Zip^Postal: 

Country: 



I Home Address 



City: 

State/Fk-ovince: 
Zip/Postal: 
Country: 
Hione: 



0 Private O Semi-Private OPubHc 
J ©Private O Semi-Private ©PubHc 
"]<?) Private 0 Semi-Private OPubHc 
J ©Private O Semi-Private O Public 
©Private O Semi-Private OPubHc 

©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private G Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private ©Semi-Private OPubHc 
©Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private ©PiibHc 
©Private O Semi-Private OPubHc 
©Private ©Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private ©Semi-Private OPubHc 



Business Phone 1 



Business Fax 



Cell Phone 



Pager 



Home Phone 



©Private ©Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private O Semi-Private OPubHc 
©Private ©Semi-Private OPubHc 



Email: 



ft 
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^ tCaf dFilc - My Card - Microsoft Inleinei Explorer 



I : ^C^^^^SESSB^P vc^^'^''' fiCSB!3SSS3!S!i ^^^^^^^^^^^^^^ 



r-1 1 






..fg la 


a 


a 


a 


a 




3 '3 
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[ Boomerang - Search Results - Microsoft Internet Explorer 



ii 



gpSMw)^ ^^^^^^^^^ . . 



Boomerang - Search Results 



=*personalIistItems*= 



Search 
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RCS file: 

C: /cvsrepo/defacto/ecardf ile/appl/SearchApplicationlnterf ace. j av 
a, V 

Working file : SearchApplicationlnterface, java 

head: 1.73 

branch: 

locks: strict 

access list: 

symbolic names: 

CEC_BETA_2_PRE_4 : 1 . 7 3 • 2 • 2 

CEC_BETA_2_PRE_3 : 1.73.2,2 

PRE_FEB_US A : 1.73.2.2 

CEC_BETA_2_PRE_2 : 1.73.2.2 

CEC_BETA_2_PRE_1 : 1.73.2.2 

PRE_ORACLE : 1.73.2.1 

MAIN_P0ST_FIXES__1 : 1.73.2.1 

PRE_MERGE_1 : 1.73.2.1 

PAGING_PRE_MERGE : 1.73.2.1 

CEC_PREDBSPLIT : 1.73.2.1 

PAGING_1: 1.73.2.1.0.4 

CEC_BETA_1_1 l_FIXES-branch : 1.73.2.1.0.2 
CEC_BETA_1_1 1 : 1.73.2.1 
RedHerring : 1.73.2.1 
CEC_BETA__1_0 : 1.73.2.1 
PETER_PRE_CEC_BETA_2 : 1.73.2.1 
PETER_PRE__CEC_BETA : 1.73.2.1 
CEC_BETA1_0 : 1 . 7 3 
BETA1_0: 1.7 3 

PRE_DS_INTEGRATION : 1.69.2.5 
ecf_f or_cec_beta : 1.73.0.2 
FIRST_ADMIN : 1.69.2.5 
Candidate_l_8_5 : 1.73 
Candida te_l_8_4 : 1.73 
Candidate_l_8_3 : 1.73 
Candidate_l_8_2 : 1.73 
Candidate_l_8_l : 1.73 
Candidate_l_8_0 : 1.73 
CEC_BETA: 1.69,2.4 
Candidate_7_2 : 1.73 
Candidate_7_l : 1.73 
Candidate_7: 1.73 
CEC_ALPHA: 1.69.2.2 
Candidate_6_2 : 1.73 
Candidate_6: 1.73 
Candidate_5: 1.72 
Candidate 3: 1.70 
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CEC_0: 1.69.0.2 
Candidate_2: 1.69 
NEW_CONFIG3: 1.64 
NEW_C0NFIG2: 1.64 
NEW_CONFIG: 1.64 
Candidate__l : 1.64 
Candidate_0: 1.62 
RC2_2 : 1 . 62 
RC2_1: 1.61 . 
POST_CUP: 1.59 ' 
RC2: 1.59 
RC1_2: 1.59 
RC1_1_1: 1.55 
RC1_1: 1.55 
RCl: 1.54 
PRE_KIM: 1.4 5 
StaticCache: 1.44 
CHRIS_BIG_CHANGES : 1.39 
WHERE7\M I_CRON : 1.36 
HTMLDOC_SPEEDUP: 1 . 34 

OLDWHEREAMI_SMGRTUNEUP_JDBCFIXES : 1,32 
USERID_FIXES: 1.32 
PS_PRE_WHEREAMI : 1.28 
PRE_WHEREAMI : 1.28 
PDA_Download_OLD_DB_POOL: 1.25 
PRE_GRAPHOS: 1.21 
DEMO: 1.18 

FirstMulti Frame: 1.16 
NAMESEARCH_I PDB : 1 . 9 
BASIC_FUNCT TONALITY : 1.8 
FIRST_CACHING : 1.5 
FIRST_HTML_SUBS : 1.5 
INTERSERVLET_COMMS : 1.3 
FIRST_WORKING: 1 . 2 
firstcut: 1.1.1.1 
bluetoad: 1.1.1 
keyword substitution: kv 

total revisions: 81; selected revisions: 81 

description : 



revision 1.73 

date: L; author: chris; state: Exp; lines: 

+ 3 ~3; 

branches: 1.73.2; 

Changes to html and additional images, one last tweak to look 
and feel 

before the big launch! 
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revision 1.72 

date: / author: chris; state: Exp; lines: 

+93 -29; 
Fixes for RC5 



revision 1,71 

date: ; author: peter; state: Exp; lines: 

+7 -5; 

The infamous lost session Id which caused so much grief. 
getSessionId in CommonApplicationlnterf ace now gets the cookie 
if there is no session id. 
Some traces left in but commented out 



revisj^*^ i 70 

date: ; author: chris; state: Exp; lines: 

+84 -l^u; 

Fixes for first name searching, various typos in html files. 
Config file changes 



revision 1.69 

date: . ; author: chris; state: Exp; lines: 

+36 -31; 

branches: 1.69.2; 

Fixes for Candidate 2. Help text additions, fixes for personal 
list display. Additon of One time welcome. NCHARS in . sql files. 
Some minor text changes. 



revis? 1.68 

date: author: peter; state: Exp; lines: 

+3 -3; 

Various bugs from test session from : 



revision 1.6*^ 

date: ; author: peter; state: Exp; lines: 

+ 6 -6; 

Implement HTTP cookie for logged in users. sid + IP no good for 
same proxy! 



revision 1.66 

date: ; author: chris; state: Exp; lines: 

+164 -105; 

Changes for privacy and tems of use as well as some bug fixes 
revision 1.65 

date: ' ^; author: kim; state: Exp; lines: 

+44 -Ij; 
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Added support for optDate parameter which is used by WAP devices 
to return 
dates . 



revision 1 . 64 

date: " ; author: chris; state: Exp; lines: 

+18 -18; 

Change ECardFile.com to ecardf ile- com, addition of final help 
changes, fix for arrive at first my ecardfile screen. 



revision 1.63 

date: 1; author: kim; state: Exp; lines: 

+19 -7; 

Quick fix put in to handle outputting NoCardFound.txt for WML 
devices . I • ve 

just stuck in a test for FMT="wml" which isn't ideal but I 

needed to do it 

fast. 



revision 1.62 

date ?8; author: peter; state: Exp; lines: 

+65 -66; 

Comment out traces 



revision 1.61 

date: - author: kim; state: Exp; lines: 

+19 -12; 

Handled the case for the failed login on WML devices. The failed 
login error 

is not just a merge of a text file and the Message HTML file but 
is an HTML 

file itself that gets merged in. This obviously doesn't work for 
non HTML 

devices. The fix is to test for specfic format tokens and is not 
generic. 



revision l . 60 

date: ; author: kim; state: Exp; lines: 

+95 -58; 

Added a check for wild card characters in the search strings and 
converted 

the HTML tags to lower case to comply with WML. Added format 
parameters to 

a number of sendParseDocument calls so that WML versions of 
documents could 
be sent. 



Page 4 of 13 



Exhibit F 



revision 1.59 

date: author: peter; state: Exp; lines 

+ 8 -3; 

Banner ad server 



revision 1.58 

date: .; author: chris; state: Exp; lines: 

+3 -3; 

Mostly help message changes 



revision 1.57 

date: .; author: chris; state: Exp; lines: 

+ 7 -5; 

Kim's first cut at the WML mobile phone version and some changes 
to config files 



revision 1.56 

date: .; author: peter; state: Exp; lines: 

+51 -50; 

Generic database code implemented. Non-generic stuff renamed to 

NOTUSED, for 

now. 



revision 1.55 

date: ; author: peter; state: Exp; lines: 

+65 -84; 

Changed a whole swag of error messages 

Fixed javascript comment problem in html /WhereAmlChange . html 
Changed some traces to logs and cleaned up some logs and traces 



revision 1.54 

date: ,; author: peter; state: Exp; lines: 

+11 -11; 

Changes for /id/ 

Remove some stray debugs 



revision 1.53 

date: ^ .; author: peter; state: Exp; lines: 

+137 -129; 

I had broken the HTML download, Kludged that now. 



revision 1.52 

date: ; author: peter; state: Exp; lines: 

+188 -20; 

Remove debugs 

VCard hardcoded kludge 
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nickname in 



users table 



revision 1.43 

date: >; author: peter; state: Exp; lines: 

+4 -2; 

Put servlet alias stuff in config.txt 



revision 1.42 

date: • .; author: peter; state: Exp; lines: 

+257 -109; 

Back on Add User 

MIMEd email message 



revision 1 - 4i 

date: .; author: chris; state: Exp; lines: 

+12 -6; 

Last fixes before release 



revision 1,40 

date: .; author: peter; state: Exp; lines: 

+11 -20; 

Servlet names changed so just search?op=qwerty etc 



revision 1.39 

date: ' " ; author: chris; state: Exp; lines: 

+111 z5; 

More changes in a very long day 



revision 1.38 

date: . •; author: chris; state: Exp; lines: 

+48 -21; 

Major GUI changes for start of usability trial 



revision 1.37 

date: ■.; author: chris; state: Exp; lines: 

+40 -21; 

Changes made after the first Boomerang usability trial. 



revision 1.36 

date: ' .; author: peter; state: Exp; lines: 

+25 -12; 

Password verification for NewUser 

Session timeout sensibilties including message on login screen 

via LoginMsg.txt 

Whereami Date 

Heading on personal list 

System reinit via smclient. This fixes IP lockout clearance. 
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revision 1,35 

date: . . ;; author: chris; state: Exp; lines: 

+123 -113; 

Changes to the html files to incorporate new wording for 

usability tests^ and new 

buttons on toolbar 

Fixes for bad error files 



revision 1,34 

date: y; author: peter; state: Exp; lines: 

+ 3 -4; 

Fixed the timezone problem and the non-testing case of BulkLoad 



revision 1.33 

date: 1 ; author: peter; state: Exp; lines: 

+100 -xu6; 
New Whereami 



revision 1.32 

date: ' .3; author: peter; state: Exp; lines: 

+22 -19; 

Fix up extraneous userids for security. 



revisi'^n 1.33 

date; • '^; author: peter; state: Exp; lines: 

+44 -51; 

Latest from Chris. 

Changes to PDA download screens. 

Changes to whereami 



revision 1,30 

date: ; author: peter; state: Exp; lines: 

+24 -12; 

Some timing fixes 
Start/Stop repairs 



revision 1.29 

date: - , author: peter; state: Exp; lines: 

+319 -55; 

Whereami 



revision 1.28 

date: ■- author: peter; state: Exp; lines: 

+15 -5; 

Required fields for search. 
DB Pool fixes: 
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^ ECardFile - Add Where Am 1 - MoziKa Firefox 






.0te- E*' 
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[GLCVS checkout binary files 




mm 


i^^ biriaiV filM - Go Search 03 ECardFile - Add Where Am I 


n. .' '..i *!.» . ~ — — — 




That's about to change. Click to find out how* 
- -V : The next £. frservkes.- 



WEB* 
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^ Claim Element 


Exhibit 


Claim 1 




The method of providing access to a 
collection of electronic business 
cards comprising the steps of: 




providing an electronic business 
card file Web site to a user; 


Exhibit A - Java code file for providing an 
electronic business card file Web site to a user 

Exhibit B - depicts a screenshot fi-om a user 
web browser of a search capability at a electronic 
business card file Web site 


allowing the creation of an 
electronic business card file by the 
user using said Web site, said 
creation comprising: 


Exhibit A - Java code file for allowing the 
creation of an electronic business card file by a user 
using the Web site 


allowing the user to enter 
information into a plurality of fields; 


Exhibit A - lines 833-866 - Java code for user 
entry of information into a plurality of fields 

Exhibit C - depicts a screenshot fi-om a user 
web browser of fields for entry of user information 


storing said information; and 


Exhibit A - lines 867 - Java code for storing 
the user-entered information 


allowing the user to search for one 
or more records; 


Exhibit A - lines 601- 643 - Java code for 
allowing the user to search for one or more records 

Exhibit B - depicts a screenshot fi-om a user 
web browser of a search screen for a user to search 
for records 


allowing the user to view said 
records; 


Exhibit A - lines 919-993 - Java code for 
allowing the user to view the results of a search 

Exhibit E - depicts a screenshot firom a user 
web browser of a search results screen 


if said creation is completed, 
allowing the modification of 
temporary location information by 
the user into a second plurality of 
fields and storing said temporary 
location information including a 
validity time period thereof; and 


Exhibit A - lines 2105-2148 and lines 2150- 
2195 - Java code for allowing modification of 
temporary location information by a user into a 
second plurality of fields and storing the temporary 
location information 

Exhibit A - lines 1081-1 171 - Java code for 
display of temporary location information 

Exhibit G - depicts a screenshot fi-om a user 
web browser of a screen for allowing the 
modification of temporary location information 


Claim 40 




The method as claimed in claim 1, 
further comprising the step of: 




allowing the user to specify a 
privacy level for said temporary 
location information. 


Exhibit A - lines 1 132-1 142 - Java code for 
allowing a user to specify a privacy level for 
temporary location information 
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Claim 45 




The computer system for 
providing access to a collection of 
electronic business cards, 
comprising: 




a processor; and 




one or more computer 
instructions which, when executed 
by said processor, cause said 
processor to : 




provide an electronic 
business card file Web site to a 
user, wherein the Web site 
includes an electronic business 
card file of the user; 


Exhibit A - Java code file for providing an 
electronic business card file Web site to a user 

Exhibit B - depicts a screenshot fi*om a user web 
browser of a search capability at a electronic business 
card file Web site 


allow the user to access the 
electronic business card file of the 
user; 


Exhibit A - lines 601- 643 - Java code for 
allowing the user to search for one or more records 

Exhibit B - depicts a screenshot firom a user web 
browser of a search screen for a user to search for 
records 


allow the user to view said 
electronic business card file of the 
user; 


Exhibit A - lines 919-993 - Java code for 
allowing the user to view the results of a search 

Exhibit E - depicts a screenshot fi-om a user web 
browser of a search results screen 


allow the modification of 
temporary location information by 
the user in a plxirality of fields and 
storing said temporary location 
information. 


Exhibit A - lines 2105-2148 and lines 2150-2195 
- Java code for allowing modification of temporary 
location information by a user into a second plurality 
of fields and storing the temporary location 
information 

Exhibit A - lines 1081 -11 71 - Java code for 
display of temporary location information 

Exhibit G - depicts a screenshot fi-om a user web 
browser of a screen for allowing the modification of 
temporary location information 


Claim 48 




The computer system as 
claimed in claim 45, fiirther 
comprising instructions which 
cause the processor to allow the 
user to specify a privacy level for 
said temporary location 
information. 


Exhibit A - lines 11 32-1 142 - Java code for 
allowing a user to specify a privacy level for 
temporary location information 
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Claim 53 




A computer readable 
storage medium, comprising 
computer instructions for: 




providing an electronic 
business card file Web site to a 
user, wherein the Web site 
includes an electronic business 
card file of the user; 


Exhibit A - Java code file for providing an 
electronic business card file Web site to a user 

Exhibit B - depicts a screenshot from a user web 
browser of a search capability at a electronic business 
card file Web site 


allowing the user to view 
said electronic business card file of 
the user; 


Exhibit A - lines 919-993 - Java code for 
allowing the user to view the results of a search 

Exhibit E - depicts a screenshot from a user web 
browser of a search results screen 


allowing the modification 
of temporary location information 
by the user in a plurality of fields 
and storing said temporary 
location information. 


Exhibit A - lines 2105-2148 and lines 2150-2195 
- Java code for allowing modification of temporary 
location information by a user into a second plurality 
of fields and storing the temporary location 
information 

Exhibit A - lines 1081-1 171 - Java code for 
display of temporary location information 

Exhibit G - depicts a screenshot from a user web 
browser of a screen for allowing the modification of 
temporary location information 


Claim 56 




The method as claimed in 
claim 53, fiirther comprising the 
step of: 




allowing the user to specify 
a privacy level for said temporary 
location information. 


Exhibit A - lines 1 132-1 142 - Java code for 
allowing a user to specify a privacy level for 
temporary location information 
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